CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Path Traversal.This issue affects WPMasterToolKit: from n/a through <= 1.13.1.
Explanation of Vulnerability in Simple Terms
WPMasterToolKit versions up to 1.13.1 contain a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server. An attacker with high-level admin privileges can bypass directory restrictions and access sensitive files outside the intended application directory. The vulnerability requires admin-level access and does not allow file modification or system disruption.
What an attacker can do
Read arbitrary files from the server filesystem.
Potential impact on your site
Admins with malicious intent or compromised admin accounts can access sensitive files like configuration files, database credentials, or private keys.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
Related vulnerabilities
