CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 17.7. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
Explanation of Vulnerability in Simple Terms
The WooCommerce Support Ticket System contains a path traversal vulnerability that allows unauthenticated attackers to read, modify, or delete arbitrary files on the server. The flaw exists in how the plugin handles file paths without proper validation. An attacker can exploit this remotely without authentication or user interaction to gain full control over the site's data and functionality.
What an attacker can do
Read, modify, or delete any file on the server without authentication.
Potential impact on your site
Complete compromise of site data, configuration files, and ability to run malicious code on the server.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
