Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Method 2.1

  • Severity: critical
  • Status: Fixed
  • Publication: December 17, 2013

The Method Theme for WordPress, which is a program used to make websites, is vulnerable to having any file on the server deleted without the proper authority. This applies to versions up to and including 2.1. The vulnerability is due to the ‘_mysite_delete_skin_zip’ parameter in the ‘dl-skin.php’ file. This means that unauthenticated attackers, or those without the proper credentials, can delete any file on the server of the vulnerable service.

Detected in:

Method fixed vulnerable versions: >= * <= 2.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.