Description
WordPress Plugin Memphis Documents Library is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Memphis Documents Library version 3.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.1.6 or latest
References
https://www.exploit-db.com/exploits/39593/
https://wordpress.org/plugins/memphis-documents-library/changelog/
Related Vulnerabilities
WordPress Plugin MetaSlider Cross-Site Scripting (2.6.2)
WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.3.0.4)
MySQL CVE-2018-3054 Vulnerability (CVE-2018-3054)
Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-8235)
Oracle Application Server CVE-2007-5517 Vulnerability (CVE-2007-5517)