WordPress Administrator Z Directory Traversal Vulnerability

A path traversal vulnerability has been identified in the WordPress plugin Administrator Z, affecting versions through 2025.03.28. This vulnerability allows for directory traversal, which could enable a malicious actor to access files outside of the intended directory or determine the existence of specific files or directories.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files on the server, potentially allowing for further exploitation of the website or server.

Remediation

Users of the WordPress Administrator Z plugin should update to version 2025.03.30 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.