References https://www.cve.org/CVERecord?id=CVE-2015-10136 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/gi-media-library/gi-media-library-30-directory-traversal https://cve.imfht.com/detail/CVE-2015-10136 https://www.ameeba.com/blog/cve-2015-10136-directory-traversal-vulnerability-in-gi-media-library-plugin-for-wordpress/ https://vulnerability.circl.lu/vuln/cve-2015-10136 https://www.ucartz.com/updates/gi-media-library-directory-traversal-vulnerability-cve-2015-10136-high-severity/ https://cve.imfht.com/detail/CVE-2015-10136?lang=en https://www.nsfocus.net/vulndb/127891
Related VulnerabilitiesMediaWiki EasyTimeline远程代码执行漏洞(CVE-2026-8857)PoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCCVE-2026-8857: MediaWiki EasyTimeline - Code Injection RCEZLMediaKit /index/ 未授权访问漏洞(CVE-2024-27488)WordPress Plugin Mayosis Core /wp-content/plugins/mayosis-core/library/wave-audio/peaks/remote_dl.php 文件读取漏洞 (CVE-2025-1565)PoCCVE-2026-34885: WordPress Media Library Assistant <= 3.34 - SQL Injection技嘉|Performance Library - Insecure DeserializationDevDojo Voyager /admin/media/upload 文件上传漏洞(CVE-2024-55417)PoCOpenMediaVault /rpc.php 默认口令漏洞PoCCVE-2024-13112: WP MediaTagger <= 4.1.1 - Cross-Site ScriptingPoCCVE-2022-0873: WordPress Gmedia Photo Gallery Plugin < 1.20.0 - Cross-Site ScriptingPoCwp-enable-media-replace-log: WordPress Plugin Enable Media Replace - Log File ExposurePoCCVE-2020-11732: Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion