CVE-2014-5368

2014-08-2214:00:00

mitre

www.cve.org

9.3 High

AI Score

Confidence

High

0.085 Low

EPSS

Percentile

94.5%

JSON

Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a … (dot dot) in the path parameter.