Approved changes feed: RSS · Atom

cpe:2.3:a:memphis_documents_library_project:memphis_documents_library:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorMemphis Documents Library Project (cf40aecf-c164-57cc-a156-cdae97260bc7)
ProductMemphis Documents Library (31fc1ec7-6eed-5e43-bf57-977498caf6c8)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-20100 vulnerable 2026-11-03 10:37:54.860554 Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview
HIGH (7.5)
Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocs_img_preview() in mdocs-downloads.php to download wp-config.php containing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.
Published: 2026-10-20T20:31:26.870Z
Updated: 2026-10-23T02:10:01.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-10385 vulnerable 2026-06-08 05:05:15.654614 Details available
The memphis-documents-library plugin before 3.0 for WordPress has XSS via $_REQUEST.
Published: 2019-08-22T13:20:41.000Z
Updated: 2024-08-06T14:10:54.825Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-10384 vulnerable 2026-06-08 05:05:15.654330 Details available
The memphis-documents-library plugin before 3.0 for WordPress has Local File Inclusion.
Published: 2019-08-22T13:19:54.000Z
Updated: 2024-08-06T14:02:38.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-10383 vulnerable 2026-06-08 05:05:15.653956 Details available
The memphis-documents-library plugin before 3.0 for WordPress has Remote File Inclusion.
Published: 2019-08-22T13:18:50.000Z
Updated: 2024-08-06T14:02:38.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.