VulnerabilityModified

CVE-2015-1579

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a ..

MEDIUM 5.0EPSS 21.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 21.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 21.50% probability · 97th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: elegantthemes/divi
Source: cve@mitre.org

References

http://www.exploit-db.com/exploits/36039Exploit
https://wpvulndb.com/vulnerabilities/7540
http://www.exploit-db.com/exploits/36039Exploit
https://wpvulndb.com/vulnerabilities/7540

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.