Description
Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocs_img_preview() in mdocs-downloads.php to download wp-config.php containing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ian Howatson | Memphis Documents Library | 2.2.1 – < 3.1.6 | 3.1.6 |
References
- EDB-39593 exploit
- Packet Storm 136374 exploit
- WPScan Advisory third-party-advisory
- Nuclei Template technical-description
- WordPress Download Page product
- VulnCheck Advisory: Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview third-party-advisory