Full title: Wordpress Theme Construct Arbitrary File Download Vulnerability 
Category: web applications
Platform: php
This exploit allows attacker to download any writable  file from the server

# 0day.today @ http://0day.today/