Aspose CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Aspose CVE published 2026-10-20

CVE-2015-20125

CVE-2015-20125 is a path traversal vulnerability in the Aspose PDF Exporter plugin for WordPress before version 2.0. This vulnerability allows unauthenticated attackers to download files by manipulating the 'file' parameter in the aspose_pdf_exporter_download.php file. The vulnerability was first observed by the Shadowserver Foundation on October 19, 2023.