CVE-2011-3981

N/A Unknown

Published: October 04, 2011 Modified: April 29, 2026

Description

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://plugins.trac.wordpress.org/changeset/438959/allwebmenus-wordpress-menu-plugin/trunk/actions.php?old=408304&old_path=allwebmenus-wordpress-menu-plugin%2Ftrunk%2Factions.php

Source: cve@mitre.org

Patch

http://secunia.com/advisories/46068

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/17861

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/49685

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/69929

Source: cve@mitre.org

http://plugins.trac.wordpress.org/changeset/438959/allwebmenus-wordpress-menu-plugin/trunk/actions.php?old=408304&old_path=allwebmenus-wordpress-menu-plugin%2Ftrunk%2Factions.php