CVE-2015-5065

MÉDIO 5.0CVE-2015-5065 · Published 24/06/2015 · updated 17/06/2026

Em resumo

CVE-2015-5065 é uma vulnerabilidade MÉDIO (CVSS 5.0) que afeta paypal currency converter basic for woocommerce (intelligent-it).
Chance de exploração nos próximos 30 dias (EPSS): 16.2%, maior que 96.9% das vulnerabilidades.
Correção: atualize para 1.4 ou posterior.

Package	Affected versions	Patched versions
paypal currency converter basic for woocommerce intelligent-it	`< 1.4`	`1.4`

Description

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter.

References

packetstormsecurity.com/files/132278/WordPress-Paypal-Currency-Converter-Basic-For-Woocommerce-1.3-File-Read.html · Exploit
securityfocus.com/bid/75416 · Third Party Advisory
plugins.trac.wordpress.org/changeset/1179092/paypal-currency-converter-basic-for-woocommerce · Third Party Advisory
wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/changelog · Patch
exploit-db.com/exploits/37253 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free