Skip to content
Threat Feed
Subscribe

Vendor

Broadstreet

1 brief RSS
high threat

Broadstreet Ad Widget: Local File Inclusion in views/modal/index.php (CVE-2017-20289)

The Broadstreet Ad Widget WordPress plugin (versions 2.2.0 through 2.11.9) is vulnerable to authenticated local file inclusion via directory traversal in the 'step' parameter, allowing for arbitrary PHP code execution.

Broadstreet Ad Widget wordpress lfi web-vulnerability
1r 1t 1c