Product
The Aspose Importer & Exporter WordPress plugin before 3.0 contains a path traversal vulnerability allowing unauthenticated attackers to read sensitive files via the file parameter.