Description
WordPress Plugin WP AmASIN-The Amazon Affiliate Shop is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP AmASIN-The Amazon Affiliate Shop version 0.9.6 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 0.9.7 or latest
References
Related Vulnerabilities
Drupal Core 7.x Security Bypass (7.0 - 7.43)
WordPress Plugin Pardakht Delkhah Cross-Site Scripting (2.9.2)
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3738)
OpenSSL Out-of-bounds Write Vulnerability (CVE-2025-15467)
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2017-1000353)