CVE-2016-10924

The ebook-download plugin before 1.2 for WordPress has directory traversal...

CVE-2016-10924

creationtimestamp| type| source ---|---|--- 2025-03-21 16:00:10+00:00| published-proof-of-concept| Telegram/vxR48xjEP6WBdCVXNbCTjoVsMUt2b0RWUkGzAhfJjXTHV4Q 2025-07-08 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hvrtv22...

CVE-2016-10924

CVE-2016-10924 affects the WordPress ebook-download plugin prior to version 1.2. The connected sources describe a local file inclusion/directory traversal vulnerability in the plugin (notably via the filedownload.php path), enabling an attacker to read arbitrary server files. Impact is consistent...