Fastw3b LLC FW Food Menu Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in the FW Food Menu plugin by Fastw3b LLC, affecting versions through 6.0.0. This vulnerability allows for improper limitation of pathname, enabling attackers to traverse directories and potentially delete arbitrary files from the website.

Impact

Exploitation of this vulnerability could lead to arbitrary file deletion. Deleting core files could disrupt the website's functionality, causing it to break or stop working properly.

Remediation

Users are advised to update the FW Food Menu plugin to a version later than 6.0.0. For those unable to update immediately, Patchstack offers a virtual patch that blocks attacks targeting this vulnerability.