CVE-2015-10133

published 2025-07-19

CVE-2015-10133: The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value. This allows…

Priority P3 52 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

EXPLOIT

The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value. This allows authenticated attackers, with administrative privileges and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. This same function can also be used to execute arbitrary PHP code.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
markjaquith	subscribe_to_comments	<= 2.1.2	—

Detection & IOCs extracted from sources · hover to see the quote

version Subscribe to Comments for WordPress <= 2.1.2↗

url https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_subscribe_comments_file_read.rb↗

• → Monitor for LFI/directory traversal patterns in the 'Path to header' parameter of the Subscribe to Comments plugin settings, which may include sequences such as '../' to traverse directories. ↗
• → A Metasploit auxiliary scanner module exists for this vulnerability; detect scanner activity targeting WordPress sites with the module path wp_subscribe_comments_file_read. ↗

• · Exploitation requires authentication with administrative privileges or above, limiting the attack surface to compromised or malicious admin accounts. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-98