CVE-2017-18586

The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths.

Score

CVSS 3.0 9.1 Critical

Status

Modified - cve@mitre.org

Published

2019-08-22

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Insert Pages (Insert Pages Project)

References

• https://wordpress.org/plugins/insert-pages/#developers