CVE-2016-20100

The Memphis Documents Library plugin for WordPress (versions before 3.1.6 ) is vulnerable to a path traversal vulnerability. The issue originates in the mdocs_img_preview() function within mdocs-downloads.php, where the mdocs-img-preview parameter is not properly sanitized. This allows unauthenti...