WordPress Prevent Files/Folders Access Plugin Path Traversal Vulnerability

A path traversal vulnerability has been identified in the WordPress Prevent Files/Folders Access plugin, affecting versions through 2.6.0. This vulnerability allows unauthorized access to files and directories by exploiting improper validation of file paths.

Impact

Exploitation of this vulnerability allows for path traversal, which could lead to unauthorized access to sensitive files on the server.

Remediation

Users of the WordPress Prevent Files/Folders Access plugin should update to version 2.6.1 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.