CVE-2019-25727
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
The WordPress plugin 'ad manager wd' version 1.0.11 contains an arbitrary file download vulnerability. An unauthenticated attacker can manipulate the 'path' parameter in GET requests to the edit.php endpoint with export=export_csv to read arbitrary files like wp-config.php.
Risk Assessment
An attacker can access sensitive WordPress configuration files, potentially leading to full site compromise.
Recommendation
Immediately update the 'ad manager wd' plugin to the latest available version or remove it.
Original NVD description (English source)
WordPress Plugin ad manager wd 1.0.11 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the path parameter. Attackers can send GET requests to the edit.php endpoint with export=export_csv and a malicious path parameter to read arbitrary files like wp-config.php accessible to the web server.