CMSJunkie WordPress Business Directory Plugin Path Traversal Vulnerability

A path traversal vulnerability has been identified in the CMSJunkie WordPress Business Directory Plugin, specifically in versions through 3.1.2. This vulnerability allows for improper limitation of pathname, potentially leading to arbitrary file deletion.

Impact

Exploitation of this vulnerability could result in arbitrary file deletion from the affected WordPress site. Deleting core files could disrupt the site's functionality, causing it to break or stop working properly.

Remediation

Users of the WP-BusinessDirectory plugin should update to version 3.1.3 or later. Patchstack users can enable auto-updates for vulnerable plugins.