CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all versions up to, and including, 1.2.9.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to overwrite arbitrary files on the affected site's server which may make remote code execution possible assuming the files can be written to by the web server.
Explanation of Vulnerability in Simple Terms
WP Editor versions up to 1.2.9.1 contain a path traversal vulnerability that allows high-privilege users to read and modify arbitrary files on the server. An attacker with admin or editor access can bypass file restrictions and access sensitive data outside the intended directory structure. This affects confidentiality, integrity, and availability of the site.
What an attacker can do
Read and modify arbitrary files on the server outside the intended directory.
Potential impact on your site
A compromised admin or editor account can access sensitive files, modify core files, or cause site downtime.
Conditions required to exploit
Attacker must have high-level privileges (admin or editor role) on the WordPress site.
Key dates
External resources
Related vulnerabilities
