Restrict File Access WordPress Plugin Directory Traversal Vulnerability

A directory traversal vulnerability has been identified in the Restrict File Access plugin for WordPress, affecting all versions through 1.1.2. The vulnerability arises in the output() function, allowing authenticated attackers with Subscriber-level access and above to read arbitrary files on the server that may contain sensitive information.

Impact

Exploitation of this vulnerability allows for authenticated users to read sensitive files on the server, potentially leading to unauthorized information disclosure.

Remediation

There is no known patch available for this vulnerability. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.