WordPress Ad Inserter plugin <= 2.4.19 - Authenticated Path Traversal vulnerability

Authenticated Path Traversal vulnerability found by Wilfried Becard in WordPress Ad Inserter plugin versions = 2.4.19. Solution Update the WordPress Ad Inserter plugin to the latest available version at least 2.4.20...

WordPress Core 5.0.0 - Crop-image Shell Upload (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Crop-image Shell Upload', 'Description' = %q This module exploits a path traversal and a local file inclusion vulnerability on WordPres...