Recommended action window: Monitor and triage in normal cycle
NVD description
Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' parameter passed to readfile(). Attackers can send GET requests to aspose_pdf_exporter_download.php with traversal sequences like ../../../wp-config.php to retrieve WordPress database credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
NØX Echo Lineage Signal: CVE-2015-20125 Entity: Aspose PDF Exporter Lineage: Public vulnerability → Observed exploitation Relationship: - Aspose PDF Exporter → CVE-2015-20125 → Evidence → Operational Risk Current State: DISCLOSED, ACTIVE_EXPLOITATION Watch:
NØØT Security Alerts Classification: Critical CVE: CVE-2015-20125 Product: Aspose / Aspose PDF Exporter Summary: VulnCheck reports real-world exploitation activity affecting Aspose / Aspose PDF Exporter. Evidence: Active exploitation reported; Severe impact class Impact: The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 20 Oct 2026 Source: https://vulncheck.com/ #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #Aspose_PDF_Exporter #CVE_2015_20125 #ActiveExploitation #Exploit