Approved changes feed: RSS · Atom

cpe:2.3:a:henrique_dias:imdb_profile_widget:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHenrique Dias (9462df6e-ad8e-563a-a5c7-08672ef6d8c8)
ProductImdb Profile Widget (059252cc-1189-5c46-9f4f-b14b494c5ef6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-20078 vulnerable 2026-07-28 18:32:21.583713 WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php
MEDIUM (6.2)
WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. Attackers can supply directory traversal sequences in GET requests to pic.php to access sensitive files like wp-config.php containing database credentials and configuration data.
Published: 2026-06-15T12:00:45.782Z
Updated: 2026-07-28T01:46:33.032Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.