plugin

Wp Lytebox Vulnerabilities

1 known security issue reported for the Wp Lytebox WordPress plugin. Most recent disclosed May 26, 2009.

1 critical

Running Wp Lytebox on your site? Check whether your installed version is affected.

Scan your site free

Lytebox <= 1.3 - Local File Inclusion

critical

Directory traversal vulnerability in main.php in the WP-Lytebox plugin 1.3 for WordPress allows remote attackers to include arbitrary local files via a .. (dot dot) in the pg parameter.

CVSS:
9.8
Affected:
up to 1.3
Fix:
No patched version reported
Disclosed:
May 26, 2009

CVE-2009-4672 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database