Snowray Software File Uploader for WooCommerce Path Traversal Vulnerability
Vulnerability
A path traversal vulnerability has been identified in the Snowray Software File Uploader for WooCommerce plugin, specifically in versions through 1.0.4. This vulnerability allows attackers to manipulate file paths, potentially leading to unauthorized access to files on the server.
Impact
Exploitation of this vulnerability could allow attackers to traverse the file system and access sensitive files outside of the intended directory.
Remediation
Users are advised to update the File Uploader for WooCommerce plugin to the latest version. If an update is not possible, consult with your hosting provider or web developer for assistance.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.