Zombify WordPress Plugin Path Traversal Vulnerability Allowing Arbitrary File Read

A path traversal vulnerability has been identified in the Zombify plugin for WordPress, affecting all versions through 1.7.5. The issue arises from inadequate input validation in the 'zf_get_file_by_url' function, allowing authenticated attackers with subscriber-level access or higher to read arbitrary files on the server. This includes sensitive system files such as '/etc/passwd'. Exploitation of this vulnerability depends on a race condition, as the file accessed will be deleted immediately after.

Impact

Exploitation of this vulnerability allows for unauthorized reading of files on the server, including sensitive system files.

Remediation

Users are advised to update the Zombify plugin to version 1.7.6 or later.