CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover.
Explanation of Vulnerability in Simple Terms
BeeTeam368 Extensions Pro versions 2.3.4 and earlier contain a path traversal vulnerability that allows authenticated users to read, write, or delete arbitrary files on the server. An attacker with low-level account access can bypass file system restrictions and access sensitive data outside the intended application directory. This vulnerability affects confidentiality, integrity, and availability of the site.
What an attacker can do
Read, write, or delete arbitrary files on the server outside the application directory.
Potential impact on your site
Attackers with basic user accounts can access configuration files, database credentials, or other sensitive data; they can also modify or delete critical files.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
