Bloafer vulnerabilities
We track 1 vulnerability in Bloafer products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Bloafer vulnerabilities
- 8.8 High severity
PHP to Page: Files or Directories Accessible to External Parties
The PHP to Page plugin for WordPress is vulnerable Local File Inclusion to Remote Code Execution in versions up to, and including, 0.3 via the 'php-to-page' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to include l