CVE-2015-20125

Deferred Deferred - Pending Action

Path Traversal in Aspose PDF Exporter WordPress Plugin

Publication date: 2026-10-20

Last updated on: 2026-10-28

Assigner: VulnCheck

Description

Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile(). Attackers can send GET requests to aspose_pdf_exporter_download.php with traversal sequences like ../../../wp-config.php to retrieve WordPress database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-28

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2015-20125

Affected Vendors & Products

Vendor	Product	Version / Range
Aspose	Aspose PDF Exporter	1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal issue in the Aspose PDF Exporter plugin for WordPress versions before 2.0. It allows unauthenticated attackers to download arbitrary files from the server by exploiting an unsanitized 'file' parameter in the aspose_pdf_exporter_download.php file. Attackers can use directory traversal sequences like ../../../wp-config.php to access sensitive files, including WordPress database credentials.

Detection Guidance

Check if the Aspose PDF Exporter plugin for WordPress is installed and verify its version. Look for unusual GET requests to aspose_pdf_exporter_download.php with path traversal sequences like ../../../ in the URL parameters.

Impact Analysis

This vulnerability can lead to unauthorized access to sensitive files on your server, including WordPress configuration files containing database credentials. Attackers could exploit it to steal confidential data, compromise your WordPress installation, or gain further access to your system. Since it requires no authentication, any unpatched version of the plugin is at risk.

Compliance Impact

This vulnerability could lead to data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Exposure of database credentials or other sensitive files could result in unauthorized data access, triggering legal and financial penalties for non-compliance with data protection standards.

Mitigation Strategies

Update the Aspose PDF Exporter plugin to version 2.0 or later. If an update is not available, consider disabling or removing the plugin immediately to prevent exploitation.

Hi! I’m here to help you understand CVE-2015-20125. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...