TI-2024-23623 CVE-2024-35754 · GHSA-294x-mfp7-qj66WordPress Ovic Importer plugin <= 1.6.3 - Arbitrary File Download vulnerabilityPriority MEDIUM 41Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ovic Team Ovic Importer allows Path Traversal.This issue affects Ovic Importer: from n/a through 1.6.3.CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00528 · Published 2024-06-10 · No fix listed CWE-22