CVE-2016-10924

CVE-2016-10924 affects the WordPress ebook-download plugin prior to version 1.2. The connected sources describe a local file inclusion/directory traversal vulnerability in the plugin (notably via the filedownload.php path), enabling an attacker to read arbitrary server files. Impact is consistent...