Neoslab Database Toolset Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in the Neoslab Database Toolset WordPress plugin, allowing for arbitrary file deletion. This issue affects versions of the plugin through 1.8.4.

Impact

Exploitation of this vulnerability could lead to the deletion of arbitrary files from the WordPress site, potentially including core files, which could disrupt the site's functionality.

Remediation

Users of the Neoslab Database Toolset WordPress plugin are advised to update to a version later than 1.8.4. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.