Vulnerabilities

TI-2012-00925 CVE-2012-1011 · GHSA-h856-rhx4-x88c

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to…

MEDIUM 44

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to bypass intended access restrictions to upload and execute arbitrary PHP code by setting the HTTP_REFERER to a certain value, then uploa…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09039 Published 2012-02-07 No fix listed CWE-264

TI-2012-00924 CVE-2012-1010 · GHSA-4m7w-g6rc-g3w7

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before…

MEDIUM 44

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a ZIP file containing a PHP file, then accessi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0894 Published 2012-02-07 No fix listed CWE-20

TI-2011-03521 CVE-2011-3981 · GHSA-hm63-8hpc-wc5j

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3…

MEDIUM 45

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.10058 Published 2011-10-04 No fix listed CWE-94

Vulnerabilities

Filters

actions.php in the AllWebMenus plugin 1.1.8 for WordPress allows remote attackers to…

Unrestricted file upload vulnerability in actions.php in the AllWebMenus plugin before…

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3…