CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Worry Proof Backup plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.2.4 via the backup upload functionality. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload a malicious ZIP archive with path traversal sequences to write arbitrary files anywhere on the server, including executable PHP files. This can lead to remote code execution.
Explanation of Vulnerability in Simple Terms
Worry Proof Backup versions 0.2.4 and earlier contain a path traversal vulnerability that allows authenticated users to read or modify arbitrary files on the server. An attacker with low-level access can bypass directory restrictions and access sensitive files outside the intended backup scope. This affects confidentiality, integrity, and availability of the site.
What an attacker can do
Read or modify any file on the server that the web server process can access.
Potential impact on your site
Attackers with basic site access can steal configuration files, database credentials, or modify core files to compromise the entire site.
Conditions required to exploit
Attacker must have a low-privilege user account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
