Description
The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WPIDE – File Manager & Code Editor | 3.0 – < 3.0 | 3.0 |