WordPress Flashcard Plugin Path Traversal Vulnerability Allowing Arbitrary File Read
Vulnerability
A path traversal vulnerability has been identified in the Flashcard plugin for WordPress, affecting all versions through 0.9. This vulnerability allows authenticated attackers with contributor level access and above to read arbitrary files on the server, potentially exposing sensitive information. The issue arises in the 'source' attribute of the 'flashcard' shortcode.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.