Yoco Payments WordPress Plugin Path Traversal Vulnerability Allowing Unauthenticated Arbitrary File Read

A path traversal vulnerability has been identified in the Yoco Payments plugin for WordPress, affecting all versions through 3.8.8. The vulnerability arises in the 'file' parameter, allowing unauthenticated attackers to read arbitrary files on the server that may contain sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information stored in server files.

Reproduction

To reproduce this vulnerability, send a request to the WordPress REST API endpoint '/yoco/logs' with a 'file' parameter that specifies a file path. The request will bypass the file existence check and the response will include the contents of the specified file, if accessible.