Description
WordPress Plugin WP Publication Archive is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Publication Archive version 2.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.3.1 or latest
References
http://www.securityfocus.com/bid/46000/exploit
http://packetstormsecurity.com/files/view/97816/WordPressWPPublicationArchive2.0.1-lfi.txt
Related Vulnerabilities
SugarCRM Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-17308)
Oracle Database Server CVE-2014-2408 Vulnerability (CVE-2014-2408)
WordPress Plugin WooCommerce Multiple Vulnerabilities (6.2.0)
WordPress Plugin RapidLoad Power-Up for Autoptimize Multiple Vulnerabilities (1.7.1)