Smackcoders WP Ultimate Exporter Path Traversal Vulnerability Allowing Arbitrary File Download

A path traversal vulnerability has been identified in the Smackcoders WP Ultimate Exporter plugin, specifically in versions through 2.9. This vulnerability allows for absolute path traversal, enabling unauthorized access to files on the server. An attacker could exploit this to download sensitive files, such as those containing login credentials or backup data.

Impact

Exploitation of this vulnerability could lead to arbitrary file download, allowing attackers to retrieve any file from the affected website.

Remediation

Users of the WP Ultimate Exporter plugin should update to version 2.9.1 or later to address this vulnerability.