CVE-2015-7309
CVSS Score Not Available
60.27%
MEDIUM RiskEPSS (98th percentile)
The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it.
Published: 9/22/2015
Modified: 4/12/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
60.27%MEDIUM Exploitation Risk
98th percentile
This vulnerability has a 60.27% probability of being exploited in the next 30 days, ranking higher than 98% of all scored CVEs.