← Back to CVE List
CVE-2015-9463
The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt