CVE-2014-8801

EPSS 18.6%

Directory traversal vulnerability in services/getfile.php in the Paid Memberships Pro plugin before 1.7.15 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the QUERY_STRING in a getfile action to wp-admin/admin-ajax.php.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/129189/Paid-Memberships-Pro-1.7.14.2-Path-Traversal.htmlunverified cve_referencewww.exploit-db.com/exploits/35303unverified exploitdbwww.exploit-db.com/exploits/35303unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/129189/Paid-Memberships-Pro-1.7.14.2-Path-Traversal.html http://security.szurek.pl/paid-memberships-pro-17142-path-traversal.html https://exchange.xforce.ibmcloud.com/vulnerabilities/98805 https://wordpress.org/plugins/paid-memberships-pro/changelog/http://www.exploit-db.com/exploits/35303 http://www.paidmembershipspro.com/2014/11/critical-security-update-pmpro-v1-7-15/http://www.securityfocus.com/bid/71293