CVE-2018-9118: Improper Limitation of a Pathname to a Restricted Directory

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...