CVE-2012-20002

The TinyMCE Thumbnail Gallery plugin for WordPress (versions before 1.1.0 ) is vulnerable to a path traversal vulnerability in the /php/download-image.php component. Unauthenticated attackers can use traversal sequences in the href parameter to read arbitrary files, such as wp-config.php, potenti...