Imdb Widget Vulnerabilities

The IMDB Profile Widget plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.0.8. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access...

CVSS:

8.1

Affected:

up to 1.0.8

Fix:

No patched version reported

Disclosed:

Jun 15, 2026

CVE-2016-20078 on NVD →

The IMDB Profile Widget plugin for WordPress is vulnerable to Local File Inclusion in versions up to 1.0.9 via the 'url' parameter found in the 'pic' file. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. Th...

CVSS:

7.5

Affected:

up to 1.0.9

Fixed in:

1.0.9

Disclosed:

Mar 26, 2016

CVE-2016-10991 on NVD →