Arbitrary File Deletion in FluentCart WordPress Plugin

Executive Summary

The FluentCart plugin for WordPress has a vulnerability in its deleteFile function that allows insufficient file path validation. This flaw enables authenticated attackers with custom-level access or higher to delete arbitrary files on the server. The issue exists in versions up to and including 1.6.2.

Useful 0 Not Useful 0

Detection Guidance

Check for unauthorized file deletions in WordPress directories, especially in wp-config.php or other critical files. Review server logs for suspicious activity from authenticated users with custom-level access or above. Use file integrity monitoring tools to detect unexpected changes.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to delete critical files like wp-config.php, potentially leading to remote code execution. This could compromise the entire WordPress site, allowing unauthorized access or control. The impact depends on the server's configuration and the files deleted.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to data breaches by allowing unauthorized file deletion or code execution, violating GDPR's integrity and confidentiality requirements. For HIPAA, it risks exposing protected health information if server files are compromised. Compliance may be impacted if sensitive data is accessed or altered.

Useful 0 Not Useful 0

Mitigation Strategies

Update the FluentCart plugin to the latest version if available. Remove or disable the plugin if no update is provided. Restrict file deletion permissions for users with custom-level access. Monitor for signs of exploitation and review server backups.

Useful 0 Not Useful 0