blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2015-5065

MEDIUM 5.0 CVSS 2.0
Published
June 24, 2015
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-22
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows remote attackers to read arbitrary files via a full pathname in the requrl parameter.

Affected WordPress components

  • PayPal Currency Converter BASIC for WooCommerce Plugin · paypal-currency-converter-basic-for-woocommerce
    Confirmed match Abandoned
    Versions not specified
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • n/a n/a — Versions not specified
  • intelligent-it paypal_currency_converter_basic_for_woocommerce — Before 1.4

References

  • packetstormsecurity.com http://packetstormsecurity.com/files/132278/WordPress-Paypal-Currency-Converter-Basic-For-Woocommerce-1.3-File-Read.html Exploit, Third Party Advisory, VDB Entry
  • www.securityfocus.com http://www.securityfocus.com/bid/75416 Third Party Advisory, VDB Entry
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/1179092/paypal-currency-converter-basic-for-woocommerce Third Party Advisory
  • wordpress.org https://wordpress.org/plugins/paypal-currency-converter-basic-for-woocommerce/changelog/ Patch, Third Party Advisory
  • www.exploit-db.com https://www.exploit-db.com/exploits/37253/ Exploit, Third Party Advisory, VDB Entry
  • nvd.nist.gov Official NVD record