Skip to content
Threat Feed
Subscribe

Vendor

Javo

1 brief RSS
high threat

Javo Spot: Path traversal in WordPress theme (CVE-2017-20287)

The Javo Spot WordPress theme before version 3.0.0 is vulnerable to unauthenticated path traversal via the jvfrm_spot_get_json AJAX action, allowing attackers to read sensitive files like wp-config.php.

Javo Spot wordpress path-traversal web-application cve-2017-20287
1r 2t 1c