WP Background Takeover < 4.1.5 - Directory Traversal
highexports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.
- CVSS:
- 7.5
- Affected:
- up to 4.1.4
- Fixed in:
- 4.1.5
- Disclosed:
- Apr 6, 2018