Description
WordPress Plugin SEO Tools is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin SEO Tools version 3.1.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.1.8 or latest
References
Related Vulnerabilities
WordPress Plugin WordPress Download Manager Cross-Site Scripting (2.7.94)
Joomla! Core 3.3.x Security Bypass (3.3.0 - 3.3.3)
SharePoint CVE-2022-30157 Vulnerability (CVE-2022-30157)
WeBid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3815)
WordPress Plugin WP Statistics Multiple Cross-Site Scripting Vulnerabilities (2.2.4)