Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.
CPE | Name | Operator | Version |
---|---|---|---|
video_downloader_for_tiktok | eq | 1.3 |