The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issuesCreditsHassan Khan Yusufzai - Splint3r7Referenceshttps://wpscan.com/vulnerability/fe3da8c1-ae21-4b70-b3f5-a7d014aa3815https://packetstormsecurity.com/files/166534/