This host is installed with WordPress ShortCode Plugin and is prone to directory traversal vulnerability.

Successful exploitation will allow attacker to read arbitrary files on the target system. Impact Level: System/Application

Upgrade to version 1.1 or later, For updates refer to http://wordpress.org/plugins/download-shortcode

Input passed via the 'file' parameter to force-download.php script is not properly sanitized before being returned to the user

WordPress Download Shortcode plugin version 0.2.3 and earlier.

Send a crafted data via HTTP GET request and check whether it is possible to read a local file

• http://www.exploit-db.com/exploits/34436/
• http://www.packetstormsecurity.com/files/128024

---

Updated on 2017-03-28