A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2018/Mar/40 | Exploit Mailing List Third Party Advisory |
https://wpvulndb.com/vulnerabilities/9044 | Third Party Advisory |
https://www.exploit-db.com/exploits/44340/ | Exploit Third Party Advisory VDB Entry |
http://seclists.org/fulldisclosure/2018/Mar/40 | Exploit Mailing List Third Party Advisory |
https://wpvulndb.com/vulnerabilities/9044 | Third Party Advisory |
https://www.exploit-db.com/exploits/44340/ | Exploit Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 04:12
Type | Values Removed | Values Added |
---|---|---|
References | () http://seclists.org/fulldisclosure/2018/Mar/40 - Exploit, Mailing List, Third Party Advisory | |
References | () https://wpvulndb.com/vulnerabilities/9044 - Third Party Advisory | |
References | () https://www.exploit-db.com/exploits/44340/ - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2018-03-19 14:29
Updated : 2024-11-21 04:12
NVD link : CVE-2018-7422
Mitre link : CVE-2018-7422
CVE.ORG link : CVE-2018-7422
JSON object : View
Products Affected
siteeditor
- site_editor