CVE-2015-5471

Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary…

published January 12, 2016

CVSS
—
EPSS
32%
Percentile
98.3
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.32483 · 98.3th percentile
Published
2016-01-12T19:00Z
EPSS history
Timeline
  • 22 SEP 03:11Z
    EPSS moved 32% → 21%
    epss
  • 06 SEP 03:08Z
    EPSS moved 32% → 21%
    epss
  • 30 AUG 15:29Z
    EPSS moved 21% → 32%
    epss
  • 29 AUG 04:04Z
    EPSS moved 32% → 21%
    epss
  • 12 JAN 19:00Z
    Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary…
    cvelistv5