ABC Notation WordPress Plugin Path Traversal Vulnerability Allowing Arbitrary File Read

A path traversal vulnerability has been identified in the ABC Notation plugin for WordPress, affecting all versions through 6.1.3. The vulnerability arises in the 'file' attribute of the 'abcjs' shortcode, allowing authenticated attackers with Contributor-level access and above to read arbitrary files on the server. This could lead to the exposure of sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive files on the server.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.