GetShop Ecommerce Path Traversal Vulnerability

A path traversal vulnerability has been identified in the GetShop Ecommerce WordPress plugin, affecting versions through 1.3. This vulnerability allows attackers to traverse directories and potentially access sensitive files on the server.

Impact

Exploitation of this vulnerability could lead to local file inclusion, allowing attackers to include and execute local files on the server. This could be particularly dangerous if the included files contain sensitive information, such as database credentials, which could then be used to compromise the entire database.

Remediation

Users of the GetShop Ecommerce WordPress plugin are advised to update to version 1.3 or later. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.