PT-2017-15293

Name of the Vulnerable Software and Affected Versions Shortcodes Ultimate versions prior to 4.10.0 Description A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors. Recommendations For versions prior to 4.10.0, update to version 4.10.0 or later to...

WordPress plugin "Shortcodes Ultimate" vulnerable to directory traversal

Overview The WordPress plugin "Shortcodes Ultimate" contains a directory traversal vulnerability CWE-22 in the Examples page. Chris Liu reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Arbitrary local files o...

Shortcodes Ultimate <= 4.9.9 - Authenticated Directory Traversal

The WordPress Shortcodes Plugin — Shortcodes Ultimate WordPress plugin was affected by an Authenticated Directory Traversal security vulnerability...