CVE-2018-9118

PoC ×2—

CVSS 3.0

7.5 high

EPSS

47%p99

Published

Apr 12, 2018 (Apr 12, 2018)

Modified

Jun 17, 2026

Description

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.

Vendors: 99robots
Products: wp background takeover advertisements
Ecosystems: WordPress
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (46.9%)

In the news1 stories

Network Attack Trends: Internet of Threats (November 2020

Palo Alto Unit 42Jun 6, 13:24 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2020-28188 CVE-2020-17519 CVE-2020-29227+62 CVEs