True Ranker
1 CVEs
product
Monthly
The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
Path Traversal
PHP
True Ranker
NVD
Exploit-DB
CVSS 3.1
7.5
EPSS
77.9%
EPSS 78%
CVSS 7.5
HIGH
POC
THREAT
This Week
The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
Path Traversal
PHP
+1
NVD
Exploit-DB