The Dropbox Folder Share plugin for WordPress is not secure in versions before 1.9.7. An unauthenticated attacker could use the ‘link’ parameter to make requests to any location on the web from the web application. This could allow them to view and change information on internal services.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
