The vulnerability resides in the Memphis Documents Library WordPress plugin, where an improperly validated input in the mdocs_img_preview parameter permits path traversal. This flaw enables an attacker to retrieve arbitrary files on the server, such as wp‑config.php, exposing database credentials. The weakness corresponds to CWE‑22: Path Traversal, leading primarily to information disclosure and potential escalation to further compromise if credentials are read.

WordPress sites running the Memphis Documents Library plugin prior to version 3.1.6 are affected. The vendor, Ian Howatson, maintains the plugin. Only installations with a firmware version older than 3.1.6 suffer from this path traversal flaw.

The CVSS base score of 8.7 indicates high seriousness; the EPSS score is not available, but the exploitation has been observed as recently as 2023‑10‑22 by the Shadowserver Foundation, and the vulnerability is not listed in CISA KEV. Attackers can exploit it via unauthenticated GET requests containing directory traversal sequences to the mdocs_img_preview endpoint, making it straightforward for anyone with network access to the WordPress site to read sensitive files.