2 matches found
CVE-2015-4694
Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the zafile parameter...
9.2CVSS0.15646EPSS
SaveExploits3References7
CVE-2015-4694: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the zafile parameter...
8.6CVSS7.9AI score0.15646EPSS
SaveExploits3References2
20