Description
WordPress Plugin WP Source Control is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Source Control version 3.0.0 is vulnerable; other versions may also be affected.
Remediation
Update to plugin version 3.1.1 or latest
References
http://www.openwall.com/lists/oss-security/2014/08/19/3
Related Vulnerabilities
WordPress Plugin cformsII SQL Injection (14.12.3)
Joomla! Core 2.5.x Denial of Service (2.5.4 - 2.5.25)
WordPress Plugin Grow by Tradedoubler-Advertiser for WooCommerce Local File Inclusion (2.0.21)
Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2024-34364)
MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-43281)