{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aasposepdf_exporterwordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:aspose:pdf_exporter:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2015-20125"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Aspose PDF Exporter (\u003c 2.0)"],"_cs_severities":["high"],"_cs_tags":["web-application","vulnerability","path-traversal"],"_cs_type":"threat","_cs_vendors":["Aspose"],"content_html":"\u003cp\u003eThe Aspose PDF Exporter plugin for WordPress, in versions prior to 2.0, contains a path traversal vulnerability. This security flaw stems from the unsanitized input handled by the 'file' parameter within the 'aspose_pdf_exporter_download.php' script, which utilizes the 'readfile()' PHP function. Unauthenticated remote attackers can exploit this vulnerability by submitting specially crafted GET requests containing directory traversal sequences (e.g., ../) to the affected script. Successful exploitation allows an attacker to bypass file system restrictions and read sensitive files from the underlying server, such as 'wp-config.php', which typically contains database credentials. The Shadowserver Foundation reported observing in-the-wild exploitation of this vulnerability as early as October 2023. Organizations using this plugin must upgrade to version 2.0 or later to remediate the issue.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability leads to the disclosure of sensitive server-side files, including WordPress configuration files containing database credentials. This can result in full database compromise, unauthorized administrative access to the WordPress instance, and further exploitation of the host environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the Aspose PDF Exporter plugin to version 2.0 or later immediately to address CVE-2015-20125.\u003c/li\u003e\n\u003cli\u003eDeploy the provided Sigma rule to detect attempts to access sensitive files using directory traversal sequences against the affected download script.\u003c/li\u003e\n\u003cli\u003eAudit web server access logs for anomalous GET requests targeting 'aspose_pdf_exporter_download.php' with path traversal patterns (e.g., '../').\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T21:53:28Z","date_published":"2026-10-20T21:53:28Z","id":"https://feed.craftedsignal.io/briefs/2026-10-aspose-pdf-exporter-traversal/","summary":"The Aspose PDF Exporter plugin for WordPress before version 2.0 is vulnerable to path traversal via the file parameter, allowing unauthenticated remote attackers to retrieve arbitrary files like wp-config.php.","title":"Aspose PDF Exporter: Path traversal vulnerability (CVE-2015-20125)","url":"https://feed.craftedsignal.io/briefs/2026-10-aspose-pdf-exporter-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:aspose:pdf_exporter:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}