← All advisories

High severity7.5NVD Advisory· Published Sep 24, 2018· Updated Jun 17, 2026

CVE-2018-16299

CVE-2018-16299

Description

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Localize My Postinferred2 versions
= 1.0+ 1 more
- (no CPE)range: = 1.0
- (no CPE)range: <=1.0
Package: https://wordpress.org/plugins/localize-my-post

Patches

Vulnerability mechanics

References

4

seclists.org/fulldisclosure/2018/Sep/33nvdExploitMailing ListThird Party Advisory
packetstormsecurity.com/files/149433/WordPress-Localize-My-Post-1.0-Local-File-Inclusion.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/45439/nvdExploitThird Party AdvisoryVDB Entry
github.com/julianburr/wp-plugin-localizemypost/issues/1nvdBroken LinkThird Party Advisory

News mentions

0

No linked articles in our index yet.