0.002 Low
EPSS
Percentile
64.7%
Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.
github.com/secwx/research/blob/main/cve/CVE-2020-24143.md