WordPress Plugin Vulnerabilities
Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download
Description
The Aspose.Words Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability.
The aspose_doc_exporter_download.php file of the plugin does not restrict access, check permission or validate the file parameter, allowing unauthenticated user to download any file from the blog (such as the wp-config.php), using a path traversal vector
Proof of Concept
Affects Plugins
Fixed in 2.0 References
Miscellaneous
Submitter
ethicalhack3r
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2015-03-28 (about 11 years ago)
Added
2015-03-30 (about 11 years ago)
Last Updated
2020-12-29 (about 5 years ago)
WPScan 