ThreatPress

WordPress Vulnerabilities Database

Back

WordPress Wp Image Zoom Plugin 1.0.3 - Remote File Disclosure

Product
WP Image Zoom
Description
Wp Image Zoom plugin is prone to a remote file disclosure vulnerability. It allows an attacker to view local files in the context of the web server process, that may aid in further attacks.
Solution
Update the plugin.
Classification
Type Information Disclosure
References
Exploit-DB
CVE
Name CVE-N/A
Versions
Affected In <= 1.0.3
Fixed In 1.0.4
Disclosure date
2012-06-18
Credits
Sammy FORGIT