Directory Traversal Flaw in GI-Media Library Plugin for WordPress

CVE-2015-10136

What is CVE-2015-10136?

The GI-Media Library plugin for WordPress is susceptible to a Directory Traversal issue that enables unauthenticated attackers to exploit the 'fileid' parameter. This vulnerability allows attackers to gain unauthorized access to server files, potentially exposing sensitive information contained within arbitrary files. Users are advised to update to version 3.0 or later to mitigate this security risk.

References