CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.2 via the file download functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Explanation of Vulnerability in Simple Terms
Easy Digital Downloads versions 3.3.2 and earlier contain an external entity injection vulnerability in XML processing. An authenticated administrator with high privileges can craft a malicious XML file to read sensitive files from the server. The vulnerability requires administrator access and does not allow modification or deletion of data.
What an attacker can do
Read sensitive files from the server by uploading a crafted XML file.
Potential impact on your site
An admin account compromise could expose server configuration files and other sensitive data.
Conditions required to exploit
Attacker must have administrator-level access to the site.
Key dates
External resources
Related vulnerabilities
