SiteOrigin Widgets Bundle <=1.14.9 Unauthenticated Arbitrary File Read via LFI (CVSS 8.8)

Vulnerability Overview Vulnerability Name: SiteOrigin Widgets Bundle $widget, 'instance' => $instance, ); $args = apply_filters( 'siteorigin_widget_display_args', $args, $widget, $instance ); $widget = $args['widget']; $instance = $args['instance']; $widget_id = $widget->get_field_id( 'widget_id' ); $widget_name = $widget->get_field_name( 'widget_id' ); $widget_id = str_replace( '[]', '', $widget_id ); $widget_name = str_replace( '[]', '', $widget_name ); $widget_id = str_replace( '_', '-', $widget_id ); $widget_name = str_replace( '_', '-', $widget_name ); $widget_id = str_replace( '-', '_', $widget_id ); $widget_name = str_replace( '-', '_', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $widget_id ); $widget_name = str_replace( 'siteorigin_widgets_', '', $widget_name ); $widget_id = str_replace( 'siteorigin_widgets_', '', $

Goal Reached Thanks to every supporter — we hit 100%!

SiteOrigin Widgets Bundle <=1.14.9 Unauthenticated Arbitrary File Read via LFI (CVSS 8.8)

More from this source