CVE-2015-10136

ALTO 7.5CVE-2015-10136 · Published 19/07/2025 · updated 17/06/2026

In breve

CVE-2015-10136 è una vulnerabilità ALTO (CVSS 7.5) che riguarda gi-media-library (zishanj).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.0%, superiore al 87.5% delle vulnerabilità.
Correzione: aggiornare a 3.0 o successiva.

Package	Affected versions	Patched versions
gi-media-library zishanj	`< 3.0`	`3.0`

Description

The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

References

wordpressa.quantika14.com/repository/index.php · Broken Link
espreto/wpsploit · Product
plugins.trac.wordpress.org/changeset/1132677 · Patch
wordpress.org/plugins/gi-media-library · Product
wpscan.com/vulnerability/7754 · Broken Link
rapid7.com/db/modules/auxiliary/scanner/http/wp_gimedia_library_file_read · Third Party Advisory
wordfence.com/threat-intel/vulnerabilities/id/2f80c3b9-5148-42eb-9137-9c538184cda3 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free