WordPress PictPress Plugin <= 0.91 - Multiple Directory Traversal

Because of these vulnerabilities in resize.php, the attackers can read arbitrary files in the “size” or “path” parameter.

Solution

           Update the plugin.