WPMasterToolKit WordPress Plugin Directory Traversal Vulnerability Allowing Arbitrary File Access

A directory traversal vulnerability has been identified in the WPMasterToolKit (WPMTK) – All in one plugin for WordPress, affecting all versions through 2.5.2. This vulnerability allows authenticated attackers with Administrator-level access and above to read and modify the contents of arbitrary files on the server, potentially exposing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized reading and modification of server files, including sensitive information.

Remediation

Users are advised to update to version 2.6.0 or a newer patched version.