WordPress WPIDE Path Traversal Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exists in WordPress WPIDE versions prior to 3.0, which stems from the fact that the filename parameter is not cleaned up and validated. An attacker can exploit the vulnerability to retrieve arbitrary files from the underlying file system via a specially designed web request.