Wpopal Opal Woo Custom Product Variation Path Traversal Vulnerability

A path traversal vulnerability has been identified in the Wpopal Opal Woo Custom Product Variation plugin for WordPress, affecting versions through 1.2.0. This vulnerability allows for improper limitation of a pathname, potentially leading to arbitrary file deletion on the affected website.

Impact

Exploitation of this vulnerability could result in arbitrary file deletion, allowing a malicious actor to remove files from the website. Deleting core files could disrupt the site's functionality.

Remediation

Users of the Wpopal Opal Woo Custom Product Variation plugin should update to version 1.2.1 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.