Known CVE

WordPress Simple Image Manipulator < 1.0 - Local File Inclusion

WordPress Simple Image Manipulator 1.0 is vulnerable to local file inclusion in ./simple-image-manipulator/controller/download.php because no checks are made to authenticate users or sanitize input when determining file location.

CVE-2015-1000010

High2015CVSS 7.5CWE-284

cve2015 · packetstorm · wpscan · wordpress · wp-plugin · lfi · wp · simple-image-manipulator_project

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website