CVE-2019-1010257

The CVE-2019-1010257 entry concerns the WordPress article2pdf plugin (versions 0.24–0.27) and a path traversal/override flaw in article2pdf_getfile.php. A crafted URL can override the target PDF file path, enabling download of any PDF that is readable by the web server, with the file potentially ...