CVE-2015-4153 PUBLISHED CVSS 5 MEDIUM

Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a load_template action to wp-admin/admin-ajax.php.

EPSS 45.89% · 97.6th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
45.89%
97.6th percentile

Affected Products

VendorProductVersions
n/an/an/a
zanematthewzm_ajax_login_\&_register0

Timeline

References

Open in Interactive Console →