CVE-2015-5469

HIGH 7.5CVE-2015-5469 · Published 23/05/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
mdc youtube downloader mdc_youtube_downloader_project	`= 2.1.0`	No fix yet

Description

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php.

References

openwall.com/lists/oss-security/2015/07/07/1 · Exploit
openwall.com/lists/oss-security/2015/07/10/5 · Mailing List
vapid.dhs.org/advisory.php · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free