CVE-2011-3981 AllWebMenus WordPress Menu Plugin <= 1.1.3 - Remote File Inclusion
HighCVSS 7.5
EPSS 10.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| likno allwebmenus plugin | = 1.1.3 | No fix listed |
| wordpress allwebmenus-wordpress-menu-plugin(WordPress) | < 1.1.4 | 1.1.4 |
References
- plugins.trac.wordpress.org patch
- 46068 third-party-advisory vendor-advisory
- 17861 exploit
- 49685 vdb-entry
- allwebmenus-actions-file-include(69929) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org