Cpe:2.3:a:cherry_plugin_project:cherry_plugin:*:*:*:*:*:wordpress:*:*

Cherry Plugin for WordPress versions before 1.2.7 contain a path traversal vulnerability in the import-export module that allows unauthenticated attackers to read arbitrary files from the web server.