Directory Traversal Vulnerability in Pixabay Images Plugin for WordPress

CVE-2015-1365

Summary

A directory traversal vulnerability exists in the Pixabay Images plugin for WordPress prior to version 2.4, specifically within the pixabay-images.php file. This flaw enables remote attackers to craft a malicious request containing '/../' sequences in the query parameter, potentially allowing them to write arbitrary files on the server. If exploited, this vulnerability could lead to unauthorized access and manipulation of sensitive data, emphasizing the importance of upgrading to the latest version of the plugin and ensuring proper security measures are in place.

References