Harmonic Design HDForms Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in the Harmonic Design HDForms WordPress plugin, specifically in versions through 1.6.1. This vulnerability allows for arbitrary file deletion, which could lead to the removal of critical files from a website, potentially causing the site to malfunction.

Impact

Exploitation of this vulnerability could result in the deletion of files from the affected WordPress site. If essential core files are removed, it could disrupt the site's functionality and cause it to break.

Remediation

Patchstack has released a mitigation rule to block attacks targeting this vulnerability. Users can activate this mitigation through Patchstack's services.