VulnerabilityModified
CVE-2015-3301
Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote administrators to read arbitrary files via a ..
MEDIUM 4.0EPSS 9.10%
Does this matter?
Lower severity and a low EPSS score (9.10%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote administrators to read arbitrary files via a .. (dot dot) in the tcp_box_path parameter in the checkout_editor_settings page to wp-admin/admin.php.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 9.10% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- thecartpress/thecartpress ecommerce shopping cart
- Source
- cve@mitre.org
References
- http://osvdb.org/show/osvdb/121439
- http://packetstormsecurity.com/files/131673/WordPress-TheCartPress-1.3.9-XSS-Local-File-Inclusion.htmlExploit
- http://www.securityfocus.com/archive/1/535396/100/0/threaded
- http://www.securityfocus.com/bid/74395
- https://wordpress.org/plugins/thecartpress/changelog/Patch
- https://www.exploit-db.com/exploits/36860/Exploit
- https://www.htbridge.com/advisory/HTB23254Exploit
- http://osvdb.org/show/osvdb/121439
- http://packetstormsecurity.com/files/131673/WordPress-TheCartPress-1.3.9-XSS-Local-File-Inclusion.htmlExploit
- http://www.securityfocus.com/archive/1/535396/100/0/threaded
- http://www.securityfocus.com/bid/74395
- https://wordpress.org/plugins/thecartpress/changelog/Patch
- https://www.exploit-db.com/exploits/36860/Exploit
- https://www.htbridge.com/advisory/HTB23254Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.