Ad Inserter <= 2.4.19 - Authenticated Path Traversal

Description

Edit (WPScanTeam):

Even though the original advisory mentions that it only affect accounts with the administrator privilege, subscriber accounts and above can exploit the issue, as the nonce can be retrieved when submitting a request with a specific cookie, as described at https://www.wordfence.com/blog/2019/07/critical-vulnerability-patched-in-ad-inserter-plugin/