CVE-2016-10924

CVE-2016-10924 CVE-2016-10924 - Directory traversal vulnerability in WordPress ebook-download plugin1.2. PoC + PID Bruteforce in Python. Usage git clone https://github.com/rvizx/CVE-2016-10924 cd CVE-2016-10924 python pidbrute.py...

CVE-2016-10924

The ebook-download plugin before 1.2 for WordPress has directory traversal...

CVE-2016-10924

creationtimestamp| type| source ---|---|--- 2025-03-21 16:00:10+00:00| published-proof-of-concept| Telegram/vxR48xjEP6WBdCVXNbCTjoVsMUt2b0RWUkGzAhfJjXTHV4Q 2025-07-08 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hvrtv22...

CVE-2016-10924

The ebook-download plugin for WordPress (versions prior to 1.2 ) is vulnerable to a directory traversal (or local file inclusion ) vulnerability in the filedownload.php file. This flaw occurs because the plugin fails to properly filter special characters in the path of a resource, allowing an att...