High severity7.5NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026

CVE-2018-9118

Description

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Background Takeover Advertisementsllm-fuzzy2 versions
<4.1.5+ 1 more
- (no CPE)range: <4.1.5
- (no CPE)range: <4.1.5
Package: https://wordpress.org/plugins/wp-background-takeover-advertisements
99robots/Wp Background Takeover Advertisements
cpe:2.3:a:99robots:wp_background_takeover_advertisements:*:*:*:*:*:wordpress:*:*
Range: <4.1.5

Patches

Vulnerability mechanics

References

wpvulndb.com/vulnerabilities/9056nvdExploitThird Party Advisory
www.exploit-db.com/exploits/44417/nvdExploitThird Party AdvisoryVDB Entry
99robots.com/docs/wp-background-takeover-advertisements/nvdProductRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.039
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000