Evil-DB LogoEvil-DB
← All CVEs

CVE-2012-4915

medium · 5

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php.

5
CVSS
50.0%
EPSS (exploit prob.)
99th
EPSS percentile
2014-05-29
Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-22

Affected products

VendorProductAffected versions
davistribegoogle_doc_embedder<= 2.5.3
davistribegoogle_doc_embedder2.0
davistribegoogle_doc_embedder2.1
davistribegoogle_doc_embedder2.2
davistribegoogle_doc_embedder2.2.1
davistribegoogle_doc_embedder2.2.2
davistribegoogle_doc_embedder2.2.3
davistribegoogle_doc_embedder2.3
davistribegoogle_doc_embedder2.4
davistribegoogle_doc_embedder2.4.1
davistribegoogle_doc_embedder2.4.2
davistribegoogle_doc_embedder2.4.3
davistribegoogle_doc_embedder2.4.4
davistribegoogle_doc_embedder2.4.5
davistribegoogle_doc_embedder2.4.6
davistribegoogle_doc_embedder2.5
davistribegoogle_doc_embedder2.5.1
davistribegoogle_doc_embedder2.5.2
wordpresswordpressall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-4915