• WordPress Plugin Insert Pages is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Insert Pages version 3.2.3 is vulnerable; prior versions may also be affected.

• Update to plugin version 3.2.4 or latest

• • https://wordpress.org/support/topic/insert-pages-has-been-removed-from-wordpress-org/
  • https://plugins.svn.wordpress.org/insert-pages/trunk/readme.txt

• 

• CWE-22

• Missing Update Directory Traversal

• WordPress Plugin WP-Filebase Download Manager Cross-Site Scripting (3.1.02)
• Drupal Core 5.x Arbitrary Code Execution (5.0 - 5.0)
• WordPress Plugin Rekt Slideshow TimThumb Arbitrary File Upload (1.0.5)
• WordPress Plugin Vodpod Video Gallery 'gid' Parameter Cross-Site Scripting (3.1.5)
• WordPress Plugin GD Star Rating Multiple Vulnerabilities (1.9.22)