CVE-2015-9406

Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. dot dot in the files parameter to css/css.php...

VulnCheck KEV: CVE-2015-9406

Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. dot dot in the files parameter to css/css.php...

CVE-2015-9406

CVE-2015-9406 affects the WordPress theme mTheme-Unus prior to version 2.3. The vulnerability is a directory traversal in the files parameter of css/css.php that allows reading arbitrary files. External sources in connected documents confirm this flaw and describe the impact as potential exposure...