WordPress Plugin Vulnerabilities

Insert Pages < 3.2.4 - Directory Traversal

Description

The Insert Pages WordPress plugin was affected by a Directory Traversal security vulnerability.

Affects Plugins

Plugin icon
insert-pages
Fixed in 3.2.4

References

CVE
CVE-2017-18586

Classification

Type
TRAVERSAL
OWASP top 10
A1: Injection
CWE
CWE-22
CVSS
9.1 (critical)

Miscellaneous

Verified
No
WPVDB ID
56a2e27a-4b2e-4b6e-98eb-73e78f91340e

Timeline

Publicly Published
2017-09-29 (about 6 years ago)
Added
2019-08-23 (about 4 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
Advanced Dewplayer <= 1.2 - download-file.php dew_file Parameter Traversal Arbitrary File Access
Published
2021-07-18
Title
Photo Gallery < 1.5.75 - File Upload Path Traversal
Published
2021-10-29
Title
Download Monitor < 4.4.7 - Admin+ Arbitrary File Download
Published
2022-11-30
Title
Easy WP SMTP < 1.5.2 - Admin+ Arbitrary File Access
Published
2023-05-16
Title
WP < 6.2.1 - Directory Traversal via Translation Files