CVE-2015-1579: Path Traversal

Published Feb 11, 2015

Updated

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734.

Affected Software

2 affected components

Elegant Themes Divi Wordpress

Elegantthemes Divi Wordpress

Event History

Feb 11, 2015

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2015-1579?

CVE-2015-1579 is considered to be a medium severity vulnerability due to the potential for unauthorized file access.

How do I fix CVE-2015-1579?

To fix CVE-2015-1579, update the Elegant Themes Divi theme to the latest version where the vulnerability is patched.

What kind of attack can exploit CVE-2015-1579?

CVE-2015-1579 can be exploited by remote attackers to perform directory traversal attacks and read arbitrary files on the server.

Which software versions are affected by CVE-2015-1579?

CVE-2015-1579 affects the Elegant Themes Divi theme for WordPress versions prior to the patch release.

Is CVE-2015-1579 a standalone vulnerability?

CVE-2015-1579 may be a duplicate of CVE-2014-9734, suggesting similar underlying issues.