The Bit Assist plugin for WordPress has a security issue called Path Traversal, which can be found in all versions up to 1.5.2. This means that attackers who are logged in and have at least Subscriber-level access can view the contents of any file on the server, including files with private information.