CVE-2015-5065

MEDIUM 5.0CVE-2015-5065 · Published 24/06/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
paypal currency converter basic for woocommerce intelligent-it	`< 1.4`	`1.4`

Description

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter.

References

packetstormsecurity.com/files/132278/WordPress-Paypal-Currency-Converter-Basic-For-Woocommerce-1.3-File-Read.html · Exploit
securityfocus.com/bid/75416 · Third Party Advisory
plugins.trac.wordpress.org/changeset/1179092/paypal-currency-converter-basic-for-woocommerce · Third Party Advisory
wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/changelog · Patch
exploit-db.com/exploits/37253 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free