FWDesign Easy Video Player WordPress & WooCommerce Path Traversal Vulnerability

A path traversal vulnerability has been identified in the FWDesign Easy Video Player WordPress & WooCommerce theme, affecting versions through 10.0. This vulnerability allows for improper limitation of a pathname, potentially leading to arbitrary file download.

Impact

Exploitation of this vulnerability could allow a malicious actor to download any file from the affected website, including sensitive files such as login credentials or backup files.

Remediation

Users are advised to update to a version of the FWDesign Easy Video Player WordPress & WooCommerce theme that is later than 10.0. For those using Patchstack, a virtual patch is available to mitigate this vulnerability.