CVE-2015-4703 WordPress Renaming Tool by Vlajo <= 1.0 - Path Traversal
MediumCVSS 5.3
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress wp-instance-rename(WordPress) | <= 1.0 | No fix listed |
| rename project rename | = 1.0 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- packetstormsecurity.com exploit patch
- [oss-security] 20150623 Arbitrary File download in wordpress plugin wp-instance-rename v1.0 exploit mailing-list patch
- 75394 vdb-entry
- www.vapid.dhs.org exploit
- wpvulndb.com exploit