OVRI Payment WordPress Plugin .htaccess File Vulnerability

A vulnerability exists in the OVRI Payment plugin for WordPress, specifically in version 1.7.0. This issue involves the presence of malicious .htaccess files that contain directives allowing the execution of known harmful PHP files while blocking certain other scripts. If these files are moved outside the plugin's directory, they could disrupt the normal functioning of a WordPress site.

Impact

Exploitation of this vulnerability could lead to interference with the proper functioning of a WordPress site, potentially allowing the execution of malicious PHP files that could be harmful to the site or its users.

Remediation

No known patch is available for this vulnerability. It is recommended to uninstall the affected plugin and find a replacement.