CVE-2018-9118
High
Description
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.
SeverityHigh
CVSS7.5
Exploit probability—
Product99robots Wp Background Takeover Advertisements
PublishedApr 12, 2018
First seenApr 12, 2018
How to fix
Update
- 99robots wp_background_takeover_advertisements4.1.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 99robots wp_background_takeover_advertisements | v < 4.1.5 | 4.1.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.