High severity7.5NVD Advisory· Published May 23, 2017· Updated Jun 17, 2026

CVE-2015-5468

Description

Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to includes/download.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Ecommerce Shop Stylingreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <2.6
Package: https://wordpress.org/plugins/wp-ecommerce-shop-styling
Wpshopstyling/Wp Ecommerce Shop Styling
cpe:2.3:a:wpshopstyling:wp_e-commerce_shop_styling:*:*:*:*:*:wordpress:*:*
Range: <=2.5

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2015/07/10/4nvdMailing ListPatchThird Party Advisory
www.openwall.com/lists/oss-security/2015/07/06/19nvdExploitMailing ListThird Party Advisory
www.vapid.dhs.org/advisory.phpnvdExploitThird Party AdvisoryVDB Entry
wordpress.org/plugins/wp-ecommerce-shop-styling/nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.019
exploit	0.030
kev	0.000
patch	-0.070
ransomware	0.000