Description
WordPress Plugin MDC YouTube Downloader is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin MDC YouTube Downloader version 2.1.0 is vulnerable; prior versions are also affected.
Remediation
Update to plugin version 2.1.1 or latest
References
http://www.vapidlabs.com/advisory.php?v=133
https://www.exploit-db.com/exploits/37529/
http://seclists.org/oss-sec/2015/q3/50
Related Vulnerabilities
WordPress Plugin External Media Arbitrary File Upload (1.0.33)
MySQL CVE-2022-21315 Vulnerability (CVE-2022-21315)
WordPress Plugin Citizen Space Cross-Site Scripting (1.1)
WordPress Plugin NS Utilities Unspecified Vulnerability (1.0)
Drupal Core 9.2.x Multiple Security Bypass Vulnerabilities (9.2.0 - 9.2.5)