Description
WordPress Plugin Ghost is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Ghost version 0.5.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 0.5.6 or latest
References
https://www.exploit-db.com/exploits/39752/
https://packetstormsecurity.com/files/136887/WordPress-Export-To-Ghost-Export-Download.html
Related Vulnerabilities
Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.1)
WordPress Plugin Email Queue by BestWebSoft Cross-Site Request Forgery (1.0.0)
WordPress Plugin UsersWP-User Registration & User Profile Cross-Site Scripting (1.2.2.28)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.5)
WordPress Plugin RSS Includes Pages Unspecified Vulnerability (3.1)