Wp Vault
1 CVEs
product
Monthly
WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting an unescaped parameter in the include functionality. Rated medium severity (CVSS 6.9), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
WordPress
Path Traversal
LFI
Hashicorp
+2
NVD
Exploit-DB
CVSS 4.0
6.9
EPSS
0.0%
EPSS 0%
CVSS 6.9
MEDIUM
POC
This Month
WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting an unescaped parameter in the include functionality. Rated medium severity (CVSS 6.9), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
WordPress
Path Traversal
+4
NVD
Exploit-DB