CVE-2017-18586: Insert Pages Project Insert Pages

Critical severity, CVSS 9.1. EPSS: 2.5% chance of exploitation in the next 30 days.

The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths.

Affected products

• Insert Pages Project Insert Pages: before 3.2.4 (fixed in 3.2.4)

Published 2019-08-22. Last modified 2026-06-17.