WordPress Media Sync Plugin Path Traversal Vulnerability

A path traversal vulnerability has been identified in the Media Sync plugin for WordPress, affecting all versions through 1.4.9. The issue arises from inadequate validation of user-supplied file paths in the 'sub_dir' and 'media_items' parameters. This lack of proper checks allows authenticated attackers with Author-level access and above to manipulate files outside the intended uploads directory.

Impact

Exploitation of this vulnerability allows for unauthorized access to files outside the designated uploads directory, potentially leading to exposure or modification of sensitive information.

Remediation

Users are advised to update the Media Sync plugin to version 1.5.0 or later.