KenBurner Slider (All Versions) - Path Traversal
highThe KenBurner Slider plugin for WordPress is vulnerable to Path Traversal in all versions via the kbslider_show_image function. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
- CVSS:
- 7.5
- Affected:
- up to *
- Fix:
- No patched version reported
- Disclosed:
- Aug 21, 2014