WordPress diarise theme <= 1.5.9 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Felipe Andrian Peixoto in WordPress Theme Diarise versions = 1.5.9...

CVE-2019-25779

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

CVE-2019-25779

The WooThemes Diarise WordPress theme, in versions through 1.5.9 , is vulnerable to a file read vulnerability (Local File Disclosure). Unauthenticated attackers can exploit this by sending GET requests using the file:// scheme paths to the calendar parameter of the download.php file. This flaw al...

CVE-2019-25779 WooThemes Diarise 1.5.9 Local File Disclosure via download.php

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

EUVD-2019-20210

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

CVE-2019-25779: Improper Limitation of a Pathname to a Restricted Directory

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

VulnCheck KEV: CVE-2019-25779

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

PT-2026-121340

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like...

Woothemes Diarise path traversal vulnerability

Woothemes Diarise versions 1.5.9 and earlier contain a path traversal vulnerability. This flaw stems from the lack of validation on the calendar parameter in download.php, potentially allowing unauthenticated attackers to read arbitrary files via the file:// path, thereby exposing sensitive files...

WordPress Diarise 1.5.9 - Arbitrary File Retrieval Detection

WordPress Diarise theme version 1.5.9 suffers from a local file retrieval vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Diarise theme version 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

WordPress Diarise 1.5.9 Local File Disclosure

Local File Disclosure in wordpress theme Diarise + Date: 07/05/2019 + CWE Number: CWE-98 + Risk: High + Author: Felipe Andrian Peixoto + Dork: inurl:"wp-content/themes/diarise/" + Vendor Homepage: https://woocommerce.com/?aff=1790 + Contact: [email protected] + Tested on: Windows 7 and...

WordPress Diarise Theme - Remote Code Execution

There are a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...