plugin

Posts In Page Vulnerabilities

1 known security issue reported for the Posts In Page WordPress plugin. Most recent disclosed Feb 13, 2017.

1 high

Running Posts In Page on your site? Check whether your installed version is affected.

Posts in Page <= 1.2.4 - Authenticated Directory Traversal leading to Local File Inclusion

high

The Posts in Page plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 1.2.4 via the [ic_add_posts template] shortcode. This allows contributor-level attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

CVSS:: 8.1
Affected:: up to 1.3.0
Fixed in:: 1.3.0
Disclosed:: Feb 13, 2017

CVE-2017-18585 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database