WordPress HTML5 Radio Player - WPBakery Page Builder Addon Path Traversal Vulnerability

A path traversal vulnerability has been identified in the WordPress HTML5 Radio Player - WPBakery Page Builder Addon, affecting versions through 2.5. This vulnerability allows for arbitrary file downloads, which could include sensitive files such as login credentials or backup files.

Impact

Exploitation of this vulnerability could lead to unauthorized downloading of files from the affected website, potentially including sensitive information like login credentials or backup files.

Remediation

Users of the WordPress HTML5 Radio Player - WPBakery Page Builder Addon should update to version 2.5.3 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.