Ian Howatson vulnerabilities
Published CVEs affecting Ian Howatson products: 1 record(s), with severity, exploitation and fixes.
CVE-2016-20100
High · 7.5
CWE-22 Oct 20, 2026
Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview
Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocs_img_preview() in mdocs-downloads.php to download wp-config.php containing database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-22.