• WordPress Plugin myEASYbackup is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin myEASYbackup version 1.0.8.1 is vulnerable; other versions may also be affected.

• Update to plugin version 1.0.9 or latest

• • http://packetstormsecurity.com/files/108711/wpmyeasybackup-traversal.txt

• 

• CVE-2012-0898

• CWE-22

• CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

• Missing Update Directory Traversal

• WordPress Plugin Post Grid PHP Object Injection (2.0.11)
• WordPress Plugin Onclick show popup Cross-Site Scripting (6.5)
• WordPress Plugin VKontakte API Cross-Site Scripting (2.7)
• WordPress 3.0.1 Multiple Vulnerabilities (0.6.2 - 3.0.1)
• WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.12)