Feeds for YouTube Pro WordPress Plugin Arbitrary File Read Vulnerability

A vulnerability allowing arbitrary file read has been identified in the Feeds for YouTube Pro plugin for WordPress, affecting all versions through 2.6.0. The issue arises from inadequate sanitization of user-supplied data, which is then used in file operations. This flaw enables unauthenticated attackers to read arbitrary files on the server, potentially exposing sensitive information. The vulnerability is particularly concerning when the 'Save Featured Images' setting is enabled and 'Disable WP Posts' is disabled.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.

Reproduction

The vulnerability can be reproduced by sending a request to the 'sby_check_wp_submit' AJAX action with a crafted 'feed_id' parameter that exploits the path traversal flaw. This can be done by an unauthenticated user, taking advantage of the insufficient data sanitization to read arbitrary files, especially when the 'Save Featured Images' option is active.

Remediation

Users are advised to update the Feeds for YouTube Pro plugin to version 2.6.1 or later.