The Mmm Simple File List WordPress plugin up to and including 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscribers, to list the content of arbitrary directories.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mediamanifesto mmm simple file list |