CVE-2015-5469

7.5 highEPSS 10%

High (7.5) in mdc youtube downloader project mdc youtube downloader. EPSS 10% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2017-05-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mdc_youtube_downloader_project:mdc_youtube_downloader

References

http://www.openwall.com/lists/oss-security/2015/07/07/1
http://www.openwall.com/lists/oss-security/2015/07/10/5
http://www.vapid.dhs.org/advisory.php?v=133
http://www.openwall.com/lists/oss-security/2015/07/07/1
http://www.openwall.com/lists/oss-security/2015/07/10/5

Check your stack JSON