Skip to content
OpenAdvisories

Vendor

WooThemes

1 known vulnerabilities.

Products

Diarise 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2019-25779

    WooThemes Diarise 1.5.9 Local File Disclosure via download.php

    WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar paramete…

    WooThemes Diarise