Unscored CVE-2015-7683 EUVD-2015-7585GHSA-pq7r-cj5m-jgr5

Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitr…

Published Oct 16, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitrary files via a full pathname in the url parameter to AjaxProxy.php.

References

https://wpvulndb.com/vulnerabilities/8214
http://packetstormsecurity.com/files/133930/WordPress-Font-7.5-Path-Traversal.html
20151012 CVE-2015-7683: Absolute Path Traversal in the Font WordPress Plugin mailing-list
https://wordpress.org/plugins/font/changelog/