TI-2018-15549 CVE-2018-25324 · GHSA-6g8q-459m-mrmm
Simple Fields 0.2-0.3.5 Local File Inclusion via wp_abspath
Priority LOW 31
Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecting null bytes into the wp_abspath parameter on PHP ve…