CVE-2015-10136

HOCH 7.5CVE-2015-10136 · Published 19/07/2025 · updated 17/06/2026

Kurz gesagt

CVE-2015-10136 ist eine Schwachstelle (HOCH (CVSS 7.5)) in gi-media-library (zishanj).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.0%, höher als bei 87.5% aller Schwachstellen.
Abhilfe: auf 3.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
gi-media-library zishanj	`< 3.0`	`3.0`

Description

The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

References

wordpressa.quantika14.com/repository/index.php · Broken Link
espreto/wpsploit · Product
plugins.trac.wordpress.org/changeset/1132677 · Patch
wordpress.org/plugins/gi-media-library · Product
wpscan.com/vulnerability/7754 · Broken Link
rapid7.com/db/modules/auxiliary/scanner/http/wp_gimedia_library_file_read · Third Party Advisory
wordfence.com/threat-intel/vulnerabilities/id/2f80c3b9-5148-42eb-9137-9c538184cda3 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free