CVE-2014-9734

This exploit demonstrates an arbitrary file download vulnerability in multiple WordPress themes by leveraging a path traversal flaw in the 'revslider_show_image' action parameter. The PoC allows unauthorized access to sensitive files like 'wp-config.php'.

The exploit demonstrates an arbitrary file download vulnerability in WordPress Slider Revolution Responsive plugin <= 4.1.4 by leveraging a path traversal flaw in the 'img' parameter of the 'revslider_show_image' action. The PoC URL directly accesses sensitive files like 'wp-config.php' without authentication.