QwikSec

Security Database

CVE

CWE

Training

CVE-2018-7422

Published: Mar 19, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://seclists.org/fulldisclosure/2018/Mar/40

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

https://wpvulndb.com/vulnerabilities/9044

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.