WordPress Plugin WP Content Source Control - Directory Traversal
A directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.
wp_content_source_controlPoC 已收录
CVSS5.0EPSS 53.3%