ThreatPress

WordPress Vulnerabilities Database

Back

WordPress Swim Team Plugin 1.44.10777 - Arbitrary File Download

Product
Swim Team
Description
Swim Team plugin is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files from the web server and get potentially sensitive information.
Solution
Update the plugin.
Classification
Type Arbitrary File Download
References
Exploit-DB
CVE
Name CVE- 2015-5471
Versions
Affected In <= 1.44.10777
Fixed In 1.44.10778
Disclosure date
2015-07-13
Credits
Larry W. Cashdollar