CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9 via the handle_downloads() function due to insufficient file path validation/sanitization. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Explanation of Vulnerability in Simple Terms
Product Input Fields for WooCommerce versions 1.9 and earlier contain a flaw that allows authenticated users with low privileges to read sensitive data they should not access. The vulnerability does not allow modification or deletion of data, and does not affect site availability. A patch version has not been publicly identified.
What an attacker can do
Read sensitive data from the site that should be restricted to higher-privilege users.
Potential impact on your site
Customer or subscriber accounts could view confidential information not intended for their access level.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site (e.g., customer or subscriber role).
Key dates
External resources
Related vulnerabilities
