Description

WordPress Plugin SEO Tools is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin SEO Tools version 3.1.7 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.1.8 or latest

References

http://www.securityfocus.com/bid/44710/exploit

http://secunia.com/advisories/42193/

Related Vulnerabilities

WordPress Plugin Far Future Expiry Header Cross-Site Request Forgery (1.4)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Multiple Cross-Site Scripting Vulnerabilities (4.2.9)

WordPress Plugin WordPress Email Template Designer-WP HTML Mail HTML Injection (2.9.0.3)

WordPress Plugin WordPress Social Sharing-Social Warfare Multiple Vulnerabilities (3.5.2)

WordPress Plugin Easy Google Maps Cross-Site Scripting (1.9.33)

Severity

High

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Directory Traversal