| Package | Affected versions | Patched versions |
|---|---|---|
| post affiliate pro | = 2.0.4 |
merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free