Vulnerabilities

TI-2023-04141 CVE-2023-4488 · GHSA-96rf-64j2-34rj

Dropbox Folder Share <= 1.9.7 - Unauthenticated Local File Inclusion

MEDIUM 51

The Dropbox Folder Share for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.9.7 via the editor-view.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01095 Published 2023-10-20 No fix listed CWE-98

TI-2023-02833 CVE-2023-3025 · GHSA-x6v9-4fg2-25cw

Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'

LOW 38

The Dropbox Folder Share plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.9.7 via the 'link' parameter.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00452 Published 2023-09-16 No fix listed CWE-918

Vulnerabilities

Filters

Dropbox Folder Share <= 1.9.7 - Unauthenticated Local File Inclusion

Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'