Product
The TinyMCE Thumbnail Gallery WordPress plugin versions prior to 1.1.0 are vulnerable to unauthenticated path traversal via the href parameter, allowing remote attackers to read arbitrary system files.