wpWax FormGent Path Traversal Vulnerability Allowing Arbitrary File Deletion

A path traversal vulnerability has been identified in the wpWax FormGent WordPress plugin, specifically in versions through 1.4.2. This vulnerability allows for arbitrary file deletion, which could lead to the removal of critical files from a website, potentially causing the site to malfunction or break.

Impact

Exploitation of this vulnerability could result in the deletion of arbitrary files from the affected WordPress site. If essential core files are removed, it could disrupt the site's functionality, causing it to break or stop working altogether.

Remediation

Users are advised to mitigate this vulnerability immediately. Patchstack has provided a mitigation rule to block attacks until an official patch is available. For more information on how to apply this mitigation, visit the Patchstack website.