CVE-2012-3588

CVE-2012-3588 corresponds to a directory traversal vulnerability in the WordPress Newsletter plugin (version 1.5) where the preview.php script fails to sanitize the data parameter, allowing remote attackers to read arbitrary files using .. in the data parameter. Multiple sources (WPScan, Tenable/...