Description
WordPress Plugin Memphis Documents Library is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Memphis Documents Library version 3.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.1.6 or latest
References
https://www.exploit-db.com/exploits/39593/
https://wordpress.org/plugins/memphis-documents-library/changelog/
Related Vulnerabilities
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-1915)
WordPress Plugin YaySMTP-Simple WP SMTP Mail Cross-Site Scripting (2.2.1)
WordPress Plugin Cart66 Lite::WordPress Ecommerce Multiple Vulnerabilities (1.5.1.14)
PHP Other Vulnerability (CVE-2007-1583)
PHP Use of Uninitialized Resource Vulnerability (CVE-2015-3414)