CyberIntel ⬡ News
★ Saved ◆ Cyber Reads
← Back ⬡ Vulnerabilities & CVEs Jun 15, 2026

CVE-2016-20080 | Brandfolder Plugin up to 3.0 on WordPress callback.php wp_abspath filename control (Exploit 39591 / EDB-39591)

VulDB Archived Jun 15, 2026 ! Full text unavailable

A vulnerability, which was classified as problematic , has been found in Brandfolder Plugin up to 3.0 on WordPress. Impacted is an unknown function of the file callback.php . This manipulation of the argument wp_abspath causes improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability appears as CVE-2016-20080 . The attack may be initiated remo

Full text unavailable — view original
✦ AI Summary · Claude Sonnet


    Full text unavailable.
    Open original ↗
    💬 Team Notes
    Article Info
    Source
    VulDB
    Category
    ⬡ Vulnerabilities & CVEs
    Published
    Jun 15, 2026
    Archived
    Jun 15, 2026
    Full Text
    ✗ Not available
    Open Original ↗