WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion

2023-11-0600:00:00

Mohamed Abdelhady

wpscan.com

vulnerability

unauthenticated

local file inclusion

path parameter

wpb show core

software

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

43.0%

JSON

Description This plugin is vulnerable to a local file inclusion via the path parameter.

PoC

Send a GET request to wpb-show-core/download-file.php with the path parameter set to an arbitrary file path on the server, - “/etc/resolv.conf” - “/etc/hosts” - “…/…/…/wp-config.php”