CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in aribhour Linet ERP-Woocommerce Integration linet-erp-woocommerce-integration allows Path Traversal.This issue affects Linet ERP-Woocommerce Integration: from n/a through <= 3.5.12.
Explanation of Vulnerability in Simple Terms
The Linet ERP-Woocommerce Integration plugin contains a path traversal vulnerability that allows authenticated administrators to read or modify files outside the intended directory. An attacker with high-level admin privileges can exploit this by crafting malicious file paths. The vulnerability affects versions up to 3.5.12.
What an attacker can do
Read or modify files on the server outside the plugin's intended directory.
Potential impact on your site
An admin account compromise could expose sensitive files or allow unauthorized file modification on your server.
Conditions required to exploit
Attacker must have high-level administrator privileges on the WordPress site.
Key dates
External resources
