CVE-2012-4915 Google Doc Embedder < 2.5.4 - Directory Traversal
MediumCVSS 5.0
EPSS 50.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| davistribe google doc embedder | <= 2.5.3 | No fix listed |
| davistribe google doc embedder | = 2.0 | No fix listed |
| davistribe google doc embedder | = 2.1 | No fix listed |
| davistribe google doc embedder | = 2.2 | No fix listed |
| davistribe google doc embedder | = 2.2.1 | No fix listed |
| davistribe google doc embedder | = 2.2.2 | No fix listed |
| davistribe google doc embedder | = 2.2.3 | No fix listed |
| davistribe google doc embedder | = 2.3 | No fix listed |
| davistribe google doc embedder | = 2.4 | No fix listed |
| davistribe google doc embedder | = 2.4.1 | No fix listed |
| davistribe google doc embedder | = 2.4.2 | No fix listed |
| davistribe google doc embedder | = 2.4.3 | No fix listed |
| davistribe google doc embedder | = 2.4.4 | No fix listed |
| davistribe google doc embedder | = 2.4.5 | No fix listed |
| davistribe google doc embedder | = 2.4.6 | No fix listed |
| davistribe google doc embedder | = 2.5 | No fix listed |
| davistribe google doc embedder | = 2.5.1 | No fix listed |
| davistribe google doc embedder | = 2.5.2 | No fix listed |
| wordpress google-document-embedder(WordPress) | < 2.5.4 | 2.5.4 |
References
- 88891 vdb-entry
- 50832 third-party-advisory
- 57133 vdb-entry
- googledocembedder-pdf-file-disclosure(80930) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org