CVE-2015-4694

Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via…

published January 8, 2016

CVSS
—
EPSS
16%
Percentile
96.8
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the za_file parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15646 · 96.8th percentile
Published
2016-01-08T20:00Z
EPSS history
Timeline
  • 08 JAN 20:00Z
    Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read arbitrary files via…
    cvelistv5