CVE-2018-9118
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.
Date published : 2018-04-12
https://99robots.com/docs/wp-background-takeover-advertisements/