CVE-2016-20100

The Memphis Documents Library plugin for WordPress (versions before 3.1.6 ) is vulnerable to a path traversal vulnerability. The issue originates in the mdocs_img_preview() function within mdocs-downloads.php, where the mdocs-img-preview parameter is not properly sanitized. This allows unauthenti...

EUVD-2016-10917

Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocsimgpreview in mdocs-downloads.php...