CVE-2018-16283

The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Traversal via the Image.php url parameter.

Date published : 2018-09-24

https://github.com/springjk/wordpress-wechat-broadcast/issues/14

https://www.exploit-db.com/exploits/45438/