Description
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- WordPress Plugin Slider REvolution 4.1.4 - Arbitrary File Download EDB-36554 · webapps · Mar 30, 2015
- Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download EDB-34511 · webapps · Sep 1, 2014 · verified
GitHub 2 repositories
-
dmonst3r/WordPressMassExploiter ★ 31 · Feb 3, 2016
[discontinued] Mass exploiter of CVE-2015-1579 for WordPress CMS
-
dmonst3r/CVE-2015-1579 ★ 4 · Feb 3, 2017
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress Slider Revolution - Local File Disclosure http/cves/2015/CVE-2015-1579.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.