WordPress Miwo FTP Plugin <= 1.0.5 - Arbitrary File Download

Miwo FTP plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information. Solution Update the plugin...

WordPress Miwo FTP Plugin 1.0.5 - Arbitrary File Download Exploit

Miwo FTP plugin is prone to an arbitrary file download vulnerability. Solution Update the plugin...

WordPress Miwo FTP Plugin 1.0.5 - Multiple CSRF and XSS Vulnerabilities

These vulnerabilities allow an attacker to execute certain actions via HTTP requests and in that way perform others actions with administrative privileges. Also, "get" and "post" parameters are not properly sanitised and it can be used to execute arbitrary HTML code in a user's browser session in...

WordPress Miwo FTP Plugin 1.0.5 - CSRF Arbitrary File Creation Exploit (RCE)

This Miwo FTP plugin is prone to a cross-site request forgery vulnerability. This vulnerability allows an attacker to execute certain actions via HTTP requests, such as PHP script file uploading with administrative privileges. Solution Update the plugin...

WordPress Miwo FTP Plugin <= 1.0.4 - Arbitrary File Disclosure

Because of this vulnerability, users can download a file within the scope of the home directory of the site. Solution Update this plugin...