CVE-2018-9118

Name of the Vulnerable Software and Affected Versions 99 Robots WP Background Takeover Advertisements plugin versions prior to 4.1.5

Description The issue concerns a Directory Traversal vulnerability. It can be exploited via a .. in the filename parameter in the exports/download.php file.

Recommendations For versions prior to 4.1.5, update to version 4.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the exports/download.php file until the update is applied. Avoid using the filename parameter with .. in the affected endpoint until the issue is resolved.