W2S Migrate WooCommerce to Shopify Plugin Arbitrary File Read Vulnerability

A vulnerability allowing arbitrary file read has been identified in the W2S – Migrate WooCommerce to Shopify plugin for WordPress, affecting all versions through 1.2.1. The issue arises from the 'viw2s_view_log' AJAX action, which lacks proper authorization. This vulnerability enables authenticated attackers with Subscriber-level access and above to read arbitrary files on the server, potentially exposing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information stored in files on the server.

Reproduction

To reproduce this vulnerability, an authenticated user with Subscriber-level access or higher can send a request to the 'viw2s_view_log' AJAX action. This request can include the name of the log file to be read. The absence of proper authorization checks allows the user to access arbitrary files on the server.

Remediation

Users are advised to update the W2S – Migrate WooCommerce to Shopify plugin to version 1.3.0 or later.