WordPress KBx Pro Ultimate Path Traversal Vulnerability Allowing Arbitrary File Deletion
Vulnerability
A path traversal vulnerability has been identified in the WordPress KBx Pro Ultimate plugin, affecting versions through 7.9.8. This vulnerability allows for arbitrary file deletion, which could lead to the removal of critical files from a website, potentially causing the site to malfunction.
Impact
Exploitation of this vulnerability could result in the deletion of arbitrary files from the affected WordPress site. If essential core files are removed, it could disrupt the site's functionality, causing it to break or stop working altogether.
Remediation
Users of WordPress KBx Pro Ultimate should update to the latest version. Patchstack has issued a virtual patch to block attacks targeting this vulnerability until an official fix is available.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.