7.5
CVSSv3

CVE-2018-16299

Published: 24/09/2018 Updated: 23/11/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

localize my post project localize my post 1.0

Exploits

# Exploit Title: WordPress Plugin Localize My Post 10 - Local File Inclusion # Author: Manuel Garcia Cardenas # Date: 2018-09-19 # Software link: eswordpressorg/plugins/localize-my-post/ # CVE: 2018-16299 # DESCRIPTION # This bug was found in the file: /localize-my-post/ajax/includephp # include($_REQUEST['file']); # The parameter "fil ...

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> WordPress Plugin Localize My Post 10 - Local File Inclusion <!--X-Subject-Header-End--> <!--X-Head-of-Message--> Fr ...