CVE-2015-1365 Pixabay Images <= 2.3 - Directory Traversal
MediumCVSS 5.0
EPSS 13.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to write to arbitrary files via a .. (dot dot) in the q parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pixabay images project pixabay images | <= 2.3 | No fix listed |
| wordpress pixabay-images(WordPress) | < 2.4 | 2.4 |
References
- 117147 vdb-entry
- packetstormsecurity.com exploit
- 20150120 MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities exploit mailing-list
- 35846 exploit
- [oss-security] 20150125 CVE request: MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities mailing-list
- 20150119 MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities mailing-list
- pixarbay-wordpress-q-dir-traversal(100036) vdb-entry
- plugins.trac.wordpress.org
- wordpress.org patch
- www.mogwaisecurity.de exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org