CVE-2015-4153

Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary…

published June 10, 2015

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a load_template action to wp-admin/admin-ajax.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13313 · 96.4th percentile
Published
2015-06-10T18:00Z
EPSS history
Timeline
  • 10 JUN 18:00Z
    Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary…
    cvelistv5