CVE-2015-4153
MEDIUM 5.0EPSS 13.3%
Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a load_template action to wp-admin/admin-ajax.php.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 13.31% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2015-06-10
- Updated
- 2024-08-06
ExploitDB entries (1)
Security advisories
- https://wordpress.org/plugins/zm-ajax-login-register/changelog
- http://www.securityfocus.com/bid/75041