Webdeclic WPMasterToolKit Path Traversal Vulnerability Allowing Arbitrary File Download

A path traversal vulnerability has been identified in the Webdeclic WPMasterToolKit WordPress plugin, affecting versions through 1.13.1. This vulnerability allows for arbitrary file download, which could lead to the exposure of sensitive files such as login credentials or backup files.

Impact

Exploitation of this vulnerability could result in the unauthorized download of any file from the affected website, including sensitive information like login credentials or backup files.

Remediation

Users of the Webdeclic WPMasterToolKit WordPress plugin should update to version 1.14.0 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.