Zach Swetz WordPress Plugin A/B Image Optimizer Path Traversal Vulnerability

A path traversal vulnerability has been identified in the WordPress Plugin A/B Image Optimizer, affecting versions through 3.3. This vulnerability allows arbitrary file download, enabling attackers to download any file from the affected website, including sensitive files such as login credentials or backup files.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the affected website, potentially including login credentials or backup files.

Remediation

Users of the WordPress Plugin A/B Image Optimizer are advised to update to a version beyond 3.3, as no official fix is currently available. However, Patchstack has issued a virtual patch that can be applied to mitigate this vulnerability until an official update can be safely implemented.