CVE-2011-1669 WP Custom Pages <= 0.5.0.1 - Path Traversal
MediumCVSS 5.0
EPSS 22.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mikoviny wp custom pages | = 0.5.0.1 | No fix listed |
| wordpress wp-custom-pages(WordPress) | <= 0.5.0.1 | No fix listed |
References
- 71707 vdb-entry
- 43963 third-party-advisory vendor-advisory
- www.autosectools.com exploit
- 17119 exploit
- 47146 exploit patch vdb-entry
- wpcustompages-wp-dir-traversal(66559) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org