WordPress Plugin Path Traversal Vulnerability (CNVD-2021-102395)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress plugin has a path traversal vulnerability, which originates from the All-in-One Video Gallery WordPress plugin before 2.5.0 in the admin The failure to clean and validate the tab parameter before using it in the require statement of the panel leads to local file inclusion issues. No details of the vulnerability are currently available.