Fusion Engage v1.0.5 (WordPress Plugin) Local File Disclosure

Posted by Why Know on Apr 10

Fusion Engage is a commercial wordpress plugin sold by internet marketer (and known scammer) Precious Ngwu to.. I’m
actually not sure. Something to do with video embedding.

Anyway, it has a LFD. Here’s the relevant code..

function fe_get_sv_html(){
global $wpdb, $video_db, $ann_db;

print(file_get_contents($_POST[‘video’]));

wp_die();…

Leave a Reply