{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/importer--exporter--3.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:aspose:importer_\u0026_exporter:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2015-20124"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Importer \u0026 Exporter (\u003c 3.0)"],"_cs_severities":["high"],"_cs_tags":["wordpress","plugin","path-traversal","web-application"],"_cs_type":"threat","_cs_vendors":["Aspose"],"content_html":"\u003cp\u003eThe Aspose Importer \u0026amp; Exporter plugin for WordPress, in versions prior to 3.0, is vulnerable to a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the underlying server filesystem. The vulnerability exists due to improper sanitization of the 'file' parameter within the 'aspose_import_export_download.php' script. By providing a crafted path containing directory traversal sequences (such as '../'), an attacker can escape the web root and access sensitive system or application files, including 'wp-config.php', which typically contains database credentials and encryption salts. This vulnerability has been subject to active exploitation in the wild, as noted by the Shadowserver Foundation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the unauthorized disclosure of sensitive server-side files. Access to 'wp-config.php' can lead to full compromise of the WordPress site, including complete database access, which may be leveraged to inject malicious content, create administrative accounts, or extract sensitive user data.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the Aspose Importer \u0026amp; Exporter plugin to version 3.0 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for requests containing directory traversal sequences directed at 'aspose_import_export_download.php'.\u003c/li\u003e\n\u003cli\u003ePerform a security audit of site configurations if the plugin was installed and exposed to the internet.\u003c/li\u003e\n\u003cli\u003eDeploy the provided Sigma rule to detect and alert on exploitation attempts against this endpoint.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T21:53:21Z","date_published":"2026-10-20T21:53:21Z","id":"https://feed.craftedsignal.io/briefs/2026-10-aspose-path-traversal/","summary":"The Aspose Importer \u0026 Exporter WordPress plugin before 3.0 contains a path traversal vulnerability allowing unauthenticated attackers to read sensitive files via the file parameter.","title":"Aspose Importer \u0026 Exporter: Path traversal vulnerability (CVE-2015-20124)","url":"https://feed.craftedsignal.io/briefs/2026-10-aspose-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Importer \u0026 Exporter (\u003c 3.0)","version":"https://jsonfeed.org/version/1.1"}