NotFound Helloprint Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in the NotFound Helloprint WordPress plugin, affecting versions through 2.0.7. This vulnerability allows for arbitrary file deletion, which could disrupt website functionality by removing essential core files.

Impact

Exploitation of this vulnerability could lead to the deletion of arbitrary files from the WordPress site, potentially including critical core files that could cause the site to malfunction or become unavailable.

Remediation

Users of the NotFound Helloprint WordPress plugin should update to version 2.1.0 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.