Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 8:15 a.m.7 views

CVE-2024-9224

The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...

6.5CVSS5.9AI score0.50829EPSS
Exploits1References1
OSV
OSV
added 2024/10/01 9:15 a.m.0 views

CVE-2024-9224

The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...

6.5CVSS5.9AI score
Exploits0References3
CNNVD
CNNVD
added 2024/10/01 12:0 a.m.5 views

WordPress plugin Hello World 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

6.5CVSS6.7AI score0.50829EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/10/01 12:0 a.m.7 views

PT-2024-39503 · WordPress · Hello World

Name of the Vulnerable Software and Affected Versions: Hello World plugin for WordPress versions up to, and including, 2.1.1 Description: The issue allows authenticated attackers with subscriber-level access and above to read the contents of arbitrary files on the server, which can contain...

6.5CVSS7AI score0.50829EPSS
Exploits1References9
Rows per page
Query Builder