CVE-2017-18585

The posts-in-page plugin before 1.3.0 for WordPress has icaddposts template='../ directory traversal...

WordPress posts-in-page plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. posts-in-page is a plugin for embedding posts in pages. A path traversal vulnerability exists in the WordPress posts-in-page plugin. T...

CVE-2017-18585

The posts-in-page plugin before 1.3.0 for WordPress has icaddposts template='../ directory traversal...

CVE-2017-18585

CVE-2017-18585 affects the WordPress plugin posts-in-page prior to version 1.3.0. The root cause is a directory traversal vulnerability in the ic_add_posts template, permitting access to locations outside the intended directory. The CVSS v3 base score is 8.1 (HIGH) with NETWORK attack vector and ...

PT-2019-8519

Name of the Vulnerable Software and Affected Versions posts-in-page plugin versions prior to 1.3.0 Description The issue allows for directory traversal due to the ic add posts template '../ directory traversal vulnerability. Recommendations For versions prior to 1.3.0, update to version 1.3.0 or...

CVE-2017-18585: Improper Limitation of a Pathname to a Restricted Directory

The posts-in-page plugin before 1.3.0 for WordPress has icaddposts template='../ directory traversal...