Ian Howatson CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Ian Howatson CVE published 2026-10-20

CVE-2016-20100

The Memphis Documents Library WordPress Plugin before version 3.1.6 is vulnerable to a path traversal attack. This vulnerability allows unauthenticated attackers to read arbitrary files on the server by sending a GET request with a traversal sequence to the mdocs-img-preview parameter. The vulnerability was first observed by the Shadowserver Foundation on 2023-10-22. Defenders should assess exposure and p [truncated]