Description
WordPress Plugin Tom M8te is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Tom M8te version 1.5.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.6.0 or latest
References
Related Vulnerabilities
WordPress Plugin EDD Favorites Cross-Site Scripting (1.0.6)
WordPress Plugin Zedity:The Easiest Way To Create Posts & Pages Cross-Site Scripting (2.5.0)
Drupal Core 9.4.x Cross-Site Scripting (9.4.0 - 9.4.2)
Apache Tomcat CVE-2017-5651 Vulnerability (CVE-2017-5651)
ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-9455)