ThimPress WP Pipes Path Traversal Vulnerability

A path traversal vulnerability has been identified in the ThimPress WP Pipes WordPress plugin, specifically in versions through 1.4.3. This vulnerability allows for improper limitation of a pathname, potentially leading to unauthorized access to restricted directories.

Impact

Exploitation of this vulnerability could allow an attacker to traverse the file system and access files outside of the intended directory, which could lead to arbitrary file deletion, according to Patchstack.