Narnoo Distributor vulnerabilities
We track 1 vulnerability in Narnoo Distributor products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Narnoo Distributor vulnerabilities
- 9.8 Critical severity
Narnoo Distributor: Improper Limitation of a Pathname to a Restricted Directory
The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is passed into a call to require() via the narnoo_distributor_lib_request AJAX action (available to both unauthenticated and authenticated use