TI-2007-02401 CVE-2007-2485 · GHSA-293j-3754-3xrjPHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and…Priority HIGH 66PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.54853 · Published 2007-05-03 · No fix listed