Skip to content
OpenAdvisories

Vendor

Jonas Hjalmarsson

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The HTML filter and csv-file search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.7 via the 'src' attribute of the 'csvsearch' shortcode. This allows authenticated attackers, with contributor-level permissions …