Path Traversal in Shared Files WordPress Plugin

Executive Summary

This vulnerability affects the Shared Files and Shared Files Pro WordPress plugins. It allows unauthenticated users to submit a file path that bypasses the plugin's path traversal filter. This can point to files outside the uploads directory. When a file entry is deleted, it can trigger deletion of arbitrary server files like wp-config.php, causing denial of service or site takeover.

Useful 0 Not Useful 0

Detection Guidance

Check if you are running vulnerable versions of the Shared Files or Shared Files Pro WordPress plugins. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files directly for version numbers. Look for versions below 1.7.67 (Shared Files) or 1.7.68 (Shared Files Pro).

Monitor file deletion logs for suspicious activity targeting critical files like wp-config.php. Review server logs for unauthorized path traversal attempts in file uploads.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to delete critical files on your server, such as wp-config.php. This could disrupt your website, cause data loss, or allow an attacker to take over your site by removing essential configuration files.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file deletion, including critical files like wp-config.php, potentially causing system downtime or site compromise. For GDPR, this may violate integrity and availability principles if personal data is lost or systems are disrupted. HIPAA could be impacted if protected health information is exposed or deleted due to service disruption.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Shared Files plugin to version 1.7.67 and Shared Files Pro to version 1.7.68 immediately. Disable file uploads temporarily if updates are not possible.

Restrict file upload permissions to prevent unauthorized deletions. Review and remove any unnecessary file deletion capabilities from user roles.

Useful 0 Not Useful 0