A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2018/Mar/40 | Exploit Mailing List Third Party Advisory |
https://wpvulndb.com/vulnerabilities/9044 | Third Party Advisory |
https://www.exploit-db.com/exploits/44340/ | Exploit Third Party Advisory VDB Entry |
Configurations
History
No history.
Information
Published : 2018-03-19 14:29
Updated : 2024-02-28 16:25
NVD link : CVE-2018-7422
Mitre link : CVE-2018-7422
CVE.ORG link : CVE-2018-7422
JSON object : View
Products Affected
siteeditor
- site_editor