CVE-2015-5065 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 16.3% (pctl 97)
Patch early
A public exploit exists.
Description
Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
| EPSS | 16.32% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2015-06-24 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| intelligent-it | paypal currency converter basic for woocommerce |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | WordPress Plugin Paypal Currency Converter Basic For WooCommerce - File Read | 2015-06-10 |
References
- http://packetstormsecurity.com/files/132278/WordPress-Paypal-Currency-Converter-Basic-For-Woocommerce-1.3-File-Read.html
- http://www.securityfocus.com/bid/75416
- https://plugins.trac.wordpress.org/changeset/1179092/paypal-currency-converter-basic-for-woocommerce
- https://wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/changelog/
- https://www.exploit-db.com/exploits/37253/
- http://packetstormsecurity.com/files/132278/WordPress-Paypal-Currency-Converter-Basic-For-Woocommerce-1.3-File-Read.html
- http://www.securityfocus.com/bid/75416
- https://plugins.trac.wordpress.org/changeset/1179092/paypal-currency-converter-basic-for-woocommerce
- https://wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/changelog/
- https://www.exploit-db.com/exploits/37253/
→ the Explorer · watch your stack · NVD