Skip to content
OpenAdvisories

Vendor

Simple-Fields

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.2

    Simple Fields 0.2-0.3.5 Local File Inclusion via wp_abspath

    Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting null bytes into the wp_abspath parameter on PHP versions before 5.3.4. Attackers can supp…