WordPress GD bbPress Attachments Plugin <= 2.2 - Directory Traversal

This vulnerability allows a remote administrator to include and execute arbitrary local files in the “tab” parameter in the gdbbpress_attachments page to wp-admin/edit.php.

Solution

           Update the plugin.