Security Advisory
CVE-2018-9118
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.