What is CVE-2014-5187?

CVE-2014-5187 is a vulnerability in Tom M8te Plugin Project Tom-M8te, classified under Path Traversal. Published 2014-08-06.

Is CVE-2014-5187 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Tom M8te Plugin Project Tom-M8te

CVE-2014-5187

Directory traversal vulnerability in the Tom M8te (tom-m8te) plugin 1.5.3 for WordPress allows remote attackers to read arbitrary files via the file parameter to tom-download-file.php.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.047 (90.9th percentile) — read the EPSS interpretation.

Affected products

Tom_m8te_plugin_project Tom-m8te_plugin — versions 1.5.3
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-5187?: CVE-2014-5187 is a vulnerability in Tom M8te Plugin Project Tom-M8te, classified under Path Traversal. Published 2014-08-06.
Is CVE-2014-5187 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.