CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The Flashcard plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.9 via the 'source' attribute of the 'flashcard' shortcode. This makes it possible for authenticated attackers, with contributor level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Explanation of Vulnerability in Simple Terms
The Flashcard Plugin for WordPress versions 0.9 and earlier contains a path traversal vulnerability that allows authenticated users to read arbitrary files from the server. An attacker with a low-privilege account can bypass directory restrictions and access sensitive files outside the intended plugin directory. This could expose configuration files, database credentials, or other sensitive data stored on the server.
What an attacker can do
Read arbitrary files from the server, including sensitive configuration and credential files.
Potential impact on your site
Sensitive server files and credentials may be exposed to any authenticated user, risking data breach and further compromise.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (subscriber or contributor level).
Key dates
External resources
