Vulnerability Details CVE-2015-5472
Absolute path traversal vulnerability in lib/download.php in the IBS Mappro plugin before 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.1%
CVSS Severity
CVSS v2 Score 7.8
References
Products affected by CVE-2015-5472
-
cpe:2.3:a:ibs_mappro_project:ibs_mappro:0.6