CVE-2014-4577
NUCLEIWP AmASIN <0.9.6 - Path Traversal
Title source: llmDescription
Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress allows remote attackers to read arbitrary files via a full pathname in the url parameter.
Nuclei Templates (1)
WP AmASIN – The Amazon Affiliate Shop - Local File Inclusion
MEDIUMby DhiyaneshDK
Scores
EPSS
0.0182
EPSS Percentile
82.9%
Details
CWE
CWE-22
Status
published
Products (1)
websupporter/wp_amasin_-_the_amazon_affiliate_shop
< 0.9.6
Published
Oct 21, 2014
Tracked Since
Feb 18, 2026