CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Danish Ali Malik Top Bar – PopUps – by WPOptin wpoptin allows PHP Local File Inclusion.This issue affects Top Bar – PopUps – by WPOptin: from n/a through <= 2.0.1.
Explanation of Vulnerability in Simple Terms
Top Bar – PopUps by WPOptin versions 2.0.1 and earlier contain a path traversal vulnerability that allows an attacker to read arbitrary files from the server. The vulnerability requires user interaction and high attack complexity, but successful exploitation grants access to sensitive files including configuration and database credentials.
What an attacker can do
Read arbitrary files from the server, including configuration files and database credentials.
Potential impact on your site
Attackers can access sensitive files like wp-config.php, potentially compromising database credentials and API keys.
Conditions required to exploit
User must visit a malicious link or page; no authentication required.
Key dates
External resources
Related vulnerabilities
