CVE-2015-10136CWE-22

GI-Media Library < 3.0 - Directory Traversal

High · published July 19, 2025

CVSS v3.1
7.5
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03021 · 87.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-07-19T09:23Z
EPSS history
Timeline
  • 19 JUL 09:23Z
    GI-Media Library < 3.0 - Directory Traversal
    cvelistv5