CVE-2015-1365

Description

Directory traversal vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to write to arbitrary files via a .. (dot dot) in the q parameter.

References

https://wordpress.org/plugins/pixabay-images/changelog/

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=1067992%40pixabay-images%2Ftrunk%2Fpixabay-images.php&old=926633%40pixabay-images%2Ftrunk%2Fpixabay-images.php

https://exchange.xforce.ibmcloud.com/vulnerabilities/100036

http://www.securityfocus.com/archive/1/534505/100/0/threaded

http://www.openwall.com/lists/oss-security/2015/01/25/5

http://osvdb.org/show/osvdb/117147

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS