Executive Summary

The Woosa – Marktplaats for WooCommerce plugin for WordPress has a vulnerability called Arbitrary File Read via Path Traversal in versions up to and including 2.0.4.

This happens because the plugin's render_logs_ui() function takes a base64-encoded file name from the 'log_file' GET parameter and directly appends it to the plugin's log directory path without properly checking if the resulting path stays within the intended directory.

As a result, an authenticated attacker with Administrator-level access can exploit this flaw to read the contents of any file on the server, including sensitive files like wp-config.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an attacker with Administrator-level access to read arbitrary files on the server.

Such unauthorized file access can lead to exposure of sensitive information, including configuration files like wp-config, which may contain database credentials and other secrets.

This can compromise the security of the website and potentially the entire server environment.

Useful 0 Not Useful 0