title: WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion
description: The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
vendor: Unknown
product: wpb-show-core
versions:
status: affected, versionType: semver, version: 0, lessThanOrEqual: 2.2
defaultStatus: affected
}