CVE-2016-20103 Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php

Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attackers can send GET requests to /admin/import-export/download-content.php with traversal sequences like...

EUVD-2016-10917

Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocsimgpreview in mdocs-downloads.php...

CVE-2016-20100 Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview

Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocsimgpreview in mdocs-downloads.php...

CVE-2016-20100 Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview

Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img-preview parameter. Attackers can send GET requests with traversal sequences to mdocsimgpreview in mdocs-downloads.php...

CVE-2016-20100

The Memphis Documents Library plugin for WordPress (versions before 3.1.6 ) is vulnerable to a path traversal vulnerability. This flaw allows unauthenticated attackers to read arbitrary files by sending GET requests containing traversal sequences to the mdocs_img_preview() function in mdocs-downl...

CVE-2015-20125 Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.php

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile. Attackers can send GET requests to asposepdfexporterdownload.php with traversal sequence...

EUVD-2015-9431

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile. Attackers can send GET requests to asposepdfexporterdownload.php with traversal sequence...

CVE-2015-20125

The Aspose PDF Exporter plugin for WordPress (versions before 2.0 ) is vulnerable to a path traversal vulnerability (CWE-22). This flaw exists because the file parameter passed to the readfile() function is not properly sanitized. Unauthenticated attackers can exploit this by sending GET requests...

CVE-2015-20123 Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php

Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile. Attackers can send GET requests to asposedocexporterdownload.php with the 'file' parameter set to...

CVE-2015-20123

The Aspose Doc Exporter plugin for WordPress (versions before 2.0) is vulnerable to a path traversal vulnerability. The root cause is the use of unsanitized paths in the readfile() function, which allows unauthenticated attackers to download arbitrary files via GET requests to aspose_doc_exporter...

EUVD-2015-9429

Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile. Attackers can send GET requests to asposedocexporterdownload.php with the 'file' parameter set to...

EUVD-2015-9430

Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to asposeimportexportdownload.php with traversal sequences lik...

CVE-2015-20124

The Aspose Importer & Exporter plugin for WordPress (versions before 3.0) is vulnerable to a path traversal vulnerability. This flaw exists because the file parameter is improperly sanitized in the aspose_import_export_download.php file. An unauthenticated attacker can exploit this by sending GET...

CVE-2015-20124 Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php

Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to asposeimportexportdownload.php with traversal sequences lik...

CVE-2015-20124 Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php

Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanitized 'file' parameter. Attackers can send GET requests to asposeimportexportdownload.php with traversal sequences lik...

CVE-2015-20123 Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php

Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile. Attackers can send GET requests to asposedocexporterdownload.php with the 'file' parameter set to...

CVE-2014-125134 ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.php

ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitiv...

CVE-2014-125134 ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.php

ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitiv...

CVE-2014-125134

The ChurcHope theme for WordPress (versions before 2.2 ) is vulnerable to a path traversal vulnerability. Unauthenticated attackers can exploit the file parameter of the /wp-content/themes/churchope/lib/downloadlink.php component by providing directory traversal sequences. This flaw allows the do...

EUVD-2014-9827

ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitiv...