The posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory traversal.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-22,
Products Affected
