Description
WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to include arbitrary files by manipulating the wp_abspath parameter. Attackers can supply path traversal sequences or remote URLs through the wp_abspath parameter to read sensitive files like wp-config.php or execute remote code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Brandfolder | Brandfolder | ≤ 3.0 | — |
References
- ExploitDB-39591 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: WordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php third-party-advisory