WordPress CVEs

Description

Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to read arbitrary files via a .. (dot dot) in the member_download action to wp-admin/admin-ajax.php.

Affected WordPress components

• cart66-lite Plugin · cart66-lite
  Confirmed match Homeless
  Versions not specified
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• reality66 cart66_lite — Up to and including 1.5.3

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/1052064/cart66-lite
• research.g0blin.co.uk https://research.g0blin.co.uk/g0blin-00021/ Exploit
• wordpress.org https://wordpress.org/plugins/cart66-lite/changelog/
• nvd.nist.gov Official NVD record