John Weissberg Print Science Designer Path Traversal Vulnerability

A path traversal vulnerability has been identified in the John Weissberg Print Science Designer plugin for WordPress, affecting versions through 1.3.155. This vulnerability allows arbitrary file downloads, which could include sensitive files such as those containing login credentials or backup data.

Impact

Exploitation of this vulnerability could lead to unauthorized downloading of files from the affected website, potentially including sensitive information like login credentials or backup files.

Remediation

Users of the Print Science Designer WordPress plugin are advised to update to the latest version. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate this vulnerability.