title: Videos sync PDF <= 1.7.4 - Unauthenticated LFI
description: The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
product: Videos sync PDF
vendor: Unknown
versions:
lessThanOrEqual: 1.7.4, status: affected, version: 1.7.4, versionType: custom
}