Nicole Sheinin

1 exploit Active since Dec 2021
CVE-2021-39312 EXPLOITDB HIGH python WORKING POC
True Ranker <= 2.2.2 - Unauthenticated Arbitrary File Read via src Parameter
The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file.
CVSS 7.5