WordPress Plugin WP Vault Local File Inclusion

Description: Type user access: any user. $GET“wpv-image” is not escaped in include file. File / Code: Path: /wp-content/plugins/wp-vault/trunk/wp-vault.php includedirnameFILE . "/images/" . $GET"wpv-image"; if isset$GET"wpvfileid" includedirnameFILE . "/wpv-file-handler.php"; exit; else if...

Wordpress WP Vault 0.8.6.6 Plugin - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: WP Vault 0.8.6.6 – Plugin WordPress – Local File Inclusion Date: 28/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/wp-vault/ Software Link: https://wordpress.org/plugins/wp-vault/ Contact:...

WP Vault 0.8.6.6 - Unauthenticated Local File Inclusion (LFI)

The wp-vault WordPress plugin was affected by an Unauthenticated Local File Inclusion LFI security vulnerability...