4 matches found
VulnCheck KEV: CVE-2018-7422
A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php, aka absolute path traversal...
Wordpress Site Editor 1.1.1 Plugin - Local File Inclusion Vulnerability
Exploit for php platform in category web applications Product: Site Editor Wordpress Plugin - https://wordpress.org/plugins/site-editor/ Vendor: Site Editor Tested version: 1.1.1 CVE ID: CVE-2018-7422 CVE description A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for...
CVE-2018-7422
A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajaxpath parameter to editor/extensions/pagebuilder/includes/ajaxshortcodepattern.php, aka absolute path traversal...
CVE-2018-7422
The Site Editor WordPress plugin (version 1.1.1 and earlier) is vulnerable to a Local File Inclusion (LFI) , also known as absolute path traversal. The root cause is a lack of sanitization on the ajax_path parameter within the file editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php...