CVE-2016-10956

The mail-masta plugin 1.0 for WordPress has local file inclusion in countofsend.php and csvexport.php...