WordPress Plugin Inspector Path Traversal Vulnerability Allowing Arbitrary File Download

A path traversal vulnerability has been identified in the WordPress Plugin Inspector, specifically in versions through 1.5. This vulnerability allows for arbitrary file download by improperly restricting file paths, potentially enabling the download of sensitive files such as login credentials or backup files.

Impact

Exploitation of this vulnerability could lead to unauthorized downloading of files from the affected website, including sensitive information like login credentials or backup files.