S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
high·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2018-9118 Scanner

CVE-2018-9118 scanner - Directory Traversal vulnerability in 99 Robots WP Background Takeover Advertisements plugin for WordPress

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.1k
Times Used
continuous scan runs
3.7k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2018-9118
7.5
CVSS

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
n/aby n/a
n/a
Updated Aug 21, 2026View on NVD →
Detail

The 99 Robots WP Background Takeover Advertisements plugin for WordPress is a popular tool that allows users to create visually stunning ads on their websites. It's an easy-to-use way to generate interest and attract traffic to any online business or project. As an essential component of online marketing, this plugin is trusted by thousands of website owners worldwide.

CVE-2018-9118 is a vulnerability that has been detected in this powerful plugin. This weakness arises from unsecured code that permits Directory Traversal through a ".." in the filename parameter. Essentially, it enables hackers to access critical files on the server and execute malicious code. This is a significant threat to website security, and without prompt action, it can quickly result in devastating consequences.

When exploited, this vulnerability can lead to a host of cybersecurity issues. For example, hackers may inject malware, redirect users to malicious websites, steal sensitive data, or even take control of the website entirely. This can not only damage the reputation of the website owner, but also cause significant financial loss and, in the worst-case scenario, legal consequences.

In conclusion, if you value the security of your digital assets, it's essential to stay informed about potential vulnerabilities. With the pro features of the s4e.io platform, users can easily and quickly learn about vulnerabilities in their digital assets and protect their online presence with confidence. Take action today and safeguard the future of your digital assets!

 

REFERENCES

Solution Advice

Fortunately, there are some necessary precautions to take to protect your digital assets from this vulnerability. These include:

  • Updating the plugin regularly to avoid using outdated and unsecured code.
  • Installing robust and reliable website security software such as SecurityForEveryone.com.
  • Conducting comprehensive vulnerability scans to identify and remediate any weaknesses in website code.
  • Creating strong passwords and restricting access to critical files and databases.
  • Backing up website files regularly and securely storing them offsite.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.