CVE-2018-16299

The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter.

• CWE-22

• http://seclists.org/fulldisclosure/2018/Sep/33Exploit, Mailing List, Third Party Advisory
• https://github.com/julianburr/wp-plugin-localizemypost/issues/1Broken Link, Third Party Advisory
• https://packetstormsecurity.com/files/149433/WordPress-Localize-My-Post-1.0-Local-File-Inclusion.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45439/Exploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Sep/33Exploit, Mailing List, Third Party Advisory
• https://github.com/julianburr/wp-plugin-localizemypost/issues/1Broken Link, Third Party Advisory
• https://packetstormsecurity.com/files/149433/WordPress-Localize-My-Post-1.0-Local-File-Inclusion.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45439/Exploit, Third Party Advisory, VDB Entry

Published

Sep 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16293An exploitable use-after-free vulnerability exists in the Ja…
• CVE-2018-16294An exploitable use-after-free vulnerability exists in the Ja…
• CVE-2018-16295An exploitable use-after-free vulnerability exists in the Ja…
• CVE-2018-16296An exploitable use-after-free vulnerability exists in the Ja…
• CVE-2018-16297An exploitable use-after-free vulnerability exists in the Ja…
• CVE-2018-16298An issue was discovered in MiniCMS 1.10. There is an mc-admi…
• CVE-2018-1630IBM Informix Dynamic Server Enterprise Edition 12.1 could al…6.7
• CVE-2018-16300The BGP parser in tcpdump before 4.9.3 allows stack consumpt…7.5
• CVE-2018-16301The command-line argument parser in tcpdump before 4.99.0 ha…7.8
• CVE-2018-16302MediaComm Zip-n-Go before 4.95 has a Buffer Overflow via a c…
• CVE-2018-16303PDF-XChange Editor through 7.0.326.1 allows remote attackers…
• CVE-2018-16307An "Out-of-band resource load" issue was discovered on Xiaom…