CVE-2020-24143

Name of the Vulnerable Software and Affected Versions: Video Downloader for TikTok plugin version 1.3 for WordPress

Description: The issue allows an attacker to access files stored outside the web root folder via the njt-tk-download-video parameter. This is a directory traversal issue in the Video Downloader for TikTok plugin for WordPress.

Recommendations: For Video Downloader for TikTok plugin version 1.3, consider disabling the njt-tk-download-video parameter until a patch is available to prevent exploitation. Restrict access to sensitive files and folders to minimize the risk of unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.