cleantalk
Vulnerabilities and Security Researches

Loco Translate, eb96c8c0-2b0d-43c0-a89e-8b8363962a6d

Application

Loco Translate

Published on
-
Research Description
Loco Translate [loco-translate] < 2.2.2 Loco Translate &lt; 2.2.2 - Authenticated LFI WordPress plugin Loco Translate version appears to have an Authenticated LFI Vulnerability under the &#039;Edit Template&#039; Functionality. The following vulnerability can be exploited by any user with access to the plugin (access can range from Admin to Subscriber) WPScanTeam Note: Was not able to reproduce this issue with any user other than admin.
Affected versions
max 2.2.2.
Status
vulnerable