- ionCube PHP Encoder makes it easy to protect PHP source code from easy observation, theft and change by compiling to bytecode. An automated Installer and Wizard (loader-wizard.php) are available to help with install, as well as manual instructions. Multiple vulnerabilities were reported in older versions of this file (version before 2.46).
- Upgrade to the latest version of Ioncube loader-wizard.php (the problem was fixed in version 2.46) or remove the file from the server.
- CRIME SSL/TLS attack
- Apache mod_negotiation filename bruteforcing
- WordPress Plugin Gmail SMTP Arbitrary File Disclosure (1.1.0)
- WordPress Plugin S3Bubble Cloud Video With Adverts & Analytics Arbitrary File Download (0.7)
- WordPress Plugin Video Embed & Thumbnail Generator Information Disclosure (1.1)