Description
WordPress Plugin SEO Tools is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin SEO Tools version 3.1.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.1.8 or latest
References
Related Vulnerabilities
WordPress 3.8.x Denial of Service Vulnerability (3.8 - 3.8.25)
Joomla! Core 1.0.x Cross-Site Scripting (1.0.0 - 1.0.11)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3546)
MySQL Other Vulnerability (CVE-2000-0981)
WordPress Plugin Comment Rating Cross-Site Request Forgery (2.9.20)