WP Vault Local File Inclusion Vulnerability

A local file inclusion vulnerability has been identified in the WP Vault WordPress plugin, specifically in version 0.8.6.6. This vulnerability allows unauthenticated attackers to read arbitrary files by exploiting an unescaped parameter in the include functionality. Attackers can use directory traversal sequences in the wpv-image GET parameter to access sensitive files, such as system configuration and credentials.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server, including system configuration and credential information.

Reproduction

To reproduce this vulnerability, send a request to the target server with the wpv-image parameter. Include directory traversal sequences to navigate the file system and access sensitive files, such as /etc/passwd.