Admin Word Count Column vulnerabilities
We track 1 vulnerability in Admin Word Count Column products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 25, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Admin Word Count Column vulnerabilities
- 9.8 Critical severity
Admin Word Count Column: Improper Limitation of a Pathname to a Restricted Directory
The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique.