Description
WordPress Plugin WP AmASIN-The Amazon Affiliate Shop is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP AmASIN-The Amazon Affiliate Shop version 0.9.6 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 0.9.7 or latest
References
Related Vulnerabilities
WordPress Plugin WooCommerce PayU India (PayUmoney-PayUbiz) Parameter Tampering (2.1.1)
WordPress Plugin WP-Lister Lite for eBay Directory Traversal (2.0.20)
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.22)
WordPress Plugin FormBuilder Multiple Vulnerabilities (1.05)
WordPress Plugin All In One WP Security & Firewall Cross-Site Scripting (4.2.1)