Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a … (dot dot) in the path parameter.
CPE | Name | Operator | Version |
---|---|---|---|
wp_content_source_control | le | 3.0.0 |