TI-2015-04727 CVE-2015-5609 · GHSA-7394-mpvp-x94fAbsolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows…Priority MEDIUM 45Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary files via a full pathname in the file parameter to download.php.CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03207 · Published 2017-05-23 · No fix listed CWE-22