CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Filippo Bodei WP Cookies Enabler wp-cookies-enabler allows PHP Local File Inclusion.This issue affects WP Cookies Enabler: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
WP Cookies Enabler versions 1.0.1 and earlier contain a path traversal vulnerability that allows an attacker to read or write arbitrary files on the server. The vulnerability requires the victim to visit a malicious link or page. An attacker can access sensitive files like configuration files containing database credentials, or upload malicious files to take control of the site.
What an attacker can do
Read or write arbitrary files on the server, including sensitive configuration and code files.
Potential impact on your site
Attackers can steal database credentials, read private data, or upload malicious code to compromise your site.
Conditions required to exploit
Victim must click a malicious link or visit an attacker-controlled page; no authentication required.
Key dates
External resources
Related vulnerabilities
