WordPress MDC YouTube Downloader 2.1.0 - Local File Inclusion
WordPress MDC YouTube Downloader 2.1.0 plugin is susceptible to local file inclusion. A remote attacker can read arbitrary files via a full pathname in the file parameter to includes/download.php.
mdc_youtube_downloaderPoC 已收录
CVSS7.5EPSS 49.1%