CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jordy Meow Database Cleaner allows Relative Path Traversal.This issue affects Database Cleaner: from n/a through 1.0.5.
Explanation of Vulnerability in Simple Terms
Database Cleaner versions up to 1.0.5 contain a path traversal vulnerability that allows authenticated administrators to read files outside the intended directory. An attacker with high-level admin privileges can access sensitive files on the server by manipulating file paths. This vulnerability requires administrative access and does not affect file integrity or availability.
What an attacker can do
Read arbitrary files on the server outside the plugin's intended directory.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can access sensitive server files like configuration or database backups.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
Related vulnerabilities
