CVE-2020-24143: Ninjateam Video Downloader For Tiktok

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.

Affected products

• Ninjateam Video Downloader For Tiktok: version 1.3 only

Published 2021-07-07. Last modified 2026-06-17.