Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WP Custom Pages url Parameter Local File Disclosure - CVE-2011-1669 - Vulnerability Database
WP Plugin Wp Custom Pages

WordPress Plugin WP Custom Pages url Parameter Local File Disclosure - CVE-2011-1669

Medium
Reference: CVE-2011-1669
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-1669
Title: WordPress Plugin WP Custom Pages url Parameter Local File Disclosure
Overview:

WordPress Plugin WP Custom Pages is prone to a local file disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability may allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks. WordPress Plugin WP Custom Pages versions 0.5.0.1 and prior are vulnerable.