Tom M8te (tom-m8te) Plugin 1.5.3 - Directory Traversal Detection

Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php. !/usr/bin/env python3 -- coding: utf-8 -- """Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1."...

CVE-2014-5187: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Tom M8te tom-m8te plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php...

PT-2014-6326

Name of the Vulnerable Software and Affected Versions tom-m8te plugin version 1.5.3 Description The issue allows remote attackers to read arbitrary files. This is achieved via the file parameter to the "tom-download-file.php" endpoint. Recommendations For tom-m8te plugin version 1.5.3, consider...