CVE-2015-5609

Name of the Vulnerable Software and Affected Versions Image Export plugin version 1.1 for WordPress

Description The issue allows remote attackers to read and delete arbitrary files by providing a full pathname in the file parameter to the "download.php" endpoint.

Recommendations For Image Export plugin version 1.1, consider disabling the download.php functionality until a patch is available to prevent exploitation. Restrict access to the file parameter in the download.php endpoint to minimize the risk of arbitrary file reading and deletion.