GeoDirectory Plugin Path Traversal and File Deletion Vulnerability

Executive Summary

This vulnerability affects the GeoDirectory WordPress plugin before version 2.8.194. It allows authenticated users with Subscriber-level access or higher to exploit a path traversal issue by supplying a malicious image URL. The plugin fails to validate this URL properly, treating it as a local file path instead of a remote resource. This enables unauthorized access to files outside the web root and deletion of files with allowed media extensions.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the GeoDirectory plugin. If it is below 2.8.194, the system is vulnerable. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files directly.

Useful 0 Not Useful 0

Impact Analysis

If you are using an affected version of the GeoDirectory plugin, attackers with basic user access could read sensitive files on your server outside the web directory. They could also delete critical media files, potentially disrupting your website's functionality or exposing confidential data. The impact is limited to files with allowed media extensions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access or deletion of sensitive data, which may violate compliance requirements under GDPR or HIPAA. Exposure of personal or health information due to file disclosure or deletion could result in regulatory penalties or legal consequences for organizations handling such data.

Useful 0 Not Useful 0

Mitigation Strategies

Update the GeoDirectory plugin to version 2.8.194 or later immediately. Remove unnecessary user roles with Subscriber-level access or higher until the update is applied.

Useful 0 Not Useful 0