Description
WordPress Plugin Memphis Documents Library is prone to a vulnerability that lets attackers download arbitrary files because the application fails to sufficiently verify user-supplied input. This may allow an attacker to gain access to sensitive information, which may aid in launching further attacks. WordPress Plugin Memphis Documents Library version 3.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.1.6 or latest
References
https://www.exploit-db.com/exploits/39593/
https://wordpress.org/plugins/memphis-documents-library/changelog/
Related Vulnerabilities
WordPress Plugin WORDPRESS VIDEO GALLERY Multiple Cross-Site Request Forgery Vulnerabilities (2.8)
WordPress Plugin Inline Tweet Sharer-Twitter Sharing Cross-Site Scripting (2.5.3)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2011-0986)
Joomla Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-7989)