BeeTeam368 Extensions WordPress Plugin Directory Traversal Vulnerability Allowing Arbitrary File Deletion

A directory traversal vulnerability has been identified in the BeeTeam368 Extensions plugin for WordPress, affecting all versions through 2.3.4. The issue arises in the handle_remove_temp_file() function, where authenticated attackers with Subscriber-level access or higher can manipulate files outside the intended directory. This vulnerability could be exploited to delete critical files such as wp-config.php, potentially leading to a complete takeover of the affected site.

Impact

Exploitation of this vulnerability allows for absolute path traversal, enabling authenticated users to delete arbitrary files on the server. Notably, deleting the wp-config.php file can result in a full site takeover.

Remediation

Users are advised to update the BeeTeam368 Extensions WordPress plugin to version 2.3.5 or later.