Live › vulnerability › CVE-2015-20123
Go to dashboardThe Aspose Doc Exporter WordPress plugin before 2.0 passes unsanitized paths to readfile(), so anyone can request arbitrary files. A GET request with a traversal path such as ../../../wp-config.php returns database credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized paths to readfile(). Attackers can send GET requests to aspose_doc_exporter_download.php with the 'file' parameter set to values like ../../../wp-config.php to retrieve database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-23.
This page as .md · .json · in your agent: get_signal("CVE-2015-20123")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.