CPE

Cpe:2.3:a:javo:javo_spot:::*:::wordpress::

1 brief RSS

Javo Spot: Path traversal in WordPress theme (CVE-2017-20287)

The Javo Spot WordPress theme before version 3.0.0 is vulnerable to unauthenticated path traversal via the jvfrm_spot_get_json AJAX action, allowing attackers to read sensitive files like wp-config.php.

Javo Spot wordpress path-traversal web-application cve-2017-20287

1r 2t 1c 2h ago

Cpe:2.3:a:javo:javo_spot:*:*:*:*:*:wordpress:*:*

Javo Spot: Path traversal in WordPress theme (CVE-2017-20287)

Cpe:2.3:a:javo:javo_spot:::*:::wordpress::