TI-2015-04605 CVE-2015-5471 · GHSA-ggwx-f7rc-cqh9Absolute path traversal vulnerability in include/user/download.php in the Swim Team…Priority MEDIUM 49Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter.CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.32483 · Published 2016-01-12 · No fix listed CWE-22