Description
WordPress Plugin Aspose Importer & Exporter is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Aspose Importer & Exporter versions 2.0 and prior are vulnerable.
Remediation
Edit the source code to ensure that input is properly verified or disable the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin Advanced Database Cleaner SQL Injection (3.0.1)
WordPress Plugin Age Verification 'redirect_to' Parameter URI Redirection (0.4)
WordPress Plugin ImageInject Multiple Vulnerabilities (1.15)
WordPress Plugin GiveWP-Donation and Fundraising Platform SQL Injection (2.5.0)
WordPress Plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar Cross-Site Scripting (3.0.1)