VYPR

Imdb Widget

by WordPress

CVEs (2)

  • CVE-2016-20078MedJun 15, 2026
    risk 0.40cvss 6.2epss

    WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. Attackers can supply directory traversal sequences in GET requests to pic.php to access sensitive…

  • CVE-2016-10991Sep 17, 2019
    risk 0.00cvss epss 0.01

    The imdb-widget plugin before 1.0.9 for WordPress has Local File Inclusion.