TI-2016-09254 CVE-2016-20078 · GHSA-p4fg-v7c8-vx52
WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php
Priority MEDIUM 64
WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter.