CVE-2016-20082

Name of the Vulnerable Software and Affected Versions Abtest WordPress Plugin (affected versions not specified)

Description An issue exists that allows unauthenticated attackers to include arbitrary files and execute arbitrary code. This is achieved by sending GET requests to the 'abtest admin.php' endpoint and manipulating the action parameter to include files from the admin directory. Local File Inclusion is a flaw that allows an attacker to include files on a server through the web browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.