Access violation vulnerability in Simple CSV Table 1.0.1

A plugin called Simple CSV Table for WordPress has a security issue that affects all versions up to 1.0.1. This vulnerability, known as Directory Traversal, can be exploited through the “href” parameter in the “[csv]” shortcode. The problem is that the plugin does not properly check the file path before adding user input to a base directory path. This allows attackers who have Contributor-level access or higher to view the contents of any file on the server, including ones with sensitive information like database credentials and authentication keys.