The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-22,
Products Affected