WordPress Groundhogg Plugin Arbitrary File Deletion Vulnerability

A vulnerability allowing arbitrary file deletion has been identified in the WordPress Groundhogg plugin, specifically in versions through 4.1.1.2. This issue arises from inadequate validation of file paths in the 'process_export_delete' and 'process_import_delete' functions. As a result, authenticated attackers with Administrator-level access can delete arbitrary files on the server. Exploiting this vulnerability could lead to remote code execution, particularly if sensitive files like 'wp-config.php' are targeted.

Impact

Successful exploitation allows authenticated users with Administrator privileges to delete arbitrary files on the server, potentially leading to remote code execution.

Reproduction

To reproduce this vulnerability, an authenticated user with Administrator privileges can use the 'process_export_delete' or 'process_import_delete' functions to delete files. The vulnerability can be exploited by sending a request that includes the name of the file to be deleted, bypassing the insufficient path validation.

Remediation

Users are advised to update the Groundhogg plugin to version 4.1.2 or later, where this vulnerability has been patched.