The Icegram Express plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.6.23 via the show_es_logs function. This allows administrator-level malicious users to read the contents of arbitrary files on the server, which can contain sensitive information including those belonging to other sites, for example in shared hosting environments.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
icegram icegram express |
Vulmon