CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 2.4.16. This is due to a missing file name/path validation against path traversal sequences. This makes it possible for authenticated attackers, with subscriber level access and above, to delete arbitrary files on the server by embedding a crafted path traversal string in a forum post body and then deleting the post.
Explanation of Vulnerability in Simple Terms
wpForo Forum versions 2.4.16 and earlier contain a path traversal vulnerability that allows authenticated users to read, modify, or delete arbitrary files on the server. An attacker with a low-privilege account can bypass file access restrictions by manipulating file paths. This affects confidentiality, integrity, and availability of the entire site.
What an attacker can do
Read, modify, or delete arbitrary files on the server with the web server's permissions.
Potential impact on your site
An authenticated forum user can access sensitive files, corrupt site data, or disable the site entirely.
Conditions required to exploit
Attacker must have a valid user account (low privilege level) and network access to the forum.
Key dates
External resources
Related vulnerabilities
