CVE-2014-5368

NUCLEI

WP Content Source Control < 3.0.0 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in the file_get_contents function in downloadfiles/download.php in the WP Content Source Control (wp-source-control) plugin 3.0.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Henri Salo · textwebappsphp
https://www.exploit-db.com/exploits/39287

Nuclei Templates (1)

WordPress Plugin WP Content Source Control - Directory Traversal
MEDIUMby daffainfo

References (4)

Scores

EPSS 0.4827
EPSS Percentile 97.7%

Details

CWE
CWE-22
Status published
Products (1)
wp_content_source_control_project/wp_content_source_control < 3.0.0
Published Aug 22, 2014
Tracked Since Feb 18, 2026