CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Path Traversal.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.5.
Explanation of Vulnerability in Simple Terms
Beaver Builder Addons by WPZOOM versions up to 1.3.5 contain a path traversal vulnerability that allows authenticated administrators to read files outside the intended directory. An attacker with admin privileges can access sensitive files on the server by manipulating file paths. This vulnerability requires high-level access and does not affect file integrity or availability.
What an attacker can do
Read arbitrary files on the server outside the plugin's intended directory.
Potential impact on your site
An admin account compromise could expose sensitive configuration files, database credentials, or other private data stored on the server.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
Related vulnerabilities
