CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The Security Ninja – WordPress Security Plugin & Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.242 via the 'get_file_source' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to extract sensitive data, including the contents of any file on the server.
Explanation of Vulnerability in Simple Terms
Security Ninja versions 5.201 through 5.242 contain a path traversal vulnerability that allows high-privilege users to read sensitive files on the server. An attacker with administrator or equivalent access can bypass file access restrictions and view confidential data. Update to a version newer than 5.242 to resolve this issue.
What an attacker can do
Read sensitive files on the server outside intended directories.
Potential impact on your site
Administrators with malicious intent or compromised admin accounts can access confidential server files.
Conditions required to exploit
Attacker must have high-level WordPress privileges (administrator or equivalent role).
Key dates
External resources
Related vulnerabilities
