Extendons WooCommerce CSV Import Export Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in the Extendons WooCommerce CSV Import Export plugin, allowing for arbitrary file deletion. This issue affects versions through 2.0.6.

Impact

Exploitation of this vulnerability could lead to the deletion of arbitrary files from the website, potentially including critical core files, which could disrupt the site's functionality.

Remediation

Users of the Extendons WooCommerce CSV Import Export plugin should update to version 2.0.7 or later. Patchstack users can enable auto-update for vulnerable plugins.