CVE-2018-9118 WP Background Takeover < 4.1.5 - Directory Traversal
HighCVSS 7.5
EPSS 46.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 99robots wp background takeover advertisements | < 4.1.5 | 4.1.5 |
| wordpress wpsite-background-takeover(WordPress) | < 4.1.5 | 4.1.5 |
References
- 99robots.com product release-notes
- wpvulndb.com exploit third-party-advisory
- 44417 exploit third-party-advisory vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org