Directory Traversal in Support Genix WordPress Plugin

Executive Summary

This vulnerability is in the Support Genix WordPress plugin before version 1.4.48. It allows unauthenticated attackers to read arbitrary files on the server through a directory traversal flaw in the ticket-attachment download feature. Attackers can access files with allowlisted extensions, including other users' private ticket attachments.

Useful 0 Not Useful 0

Detection Guidance

Check if the Support Genix WordPress plugin version is below 1.4.48. Inspect server logs for unusual file access patterns or requests to the ticket-attachment download route with directory traversal sequences like '../'. Use tools like curl to test if arbitrary files can be accessed via the vulnerable endpoint.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can expose sensitive files on your server to attackers. They may access private ticket attachments, configuration files, or other sensitive data. This could lead to data breaches, loss of confidential information, or further compromise of your system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA if it results in unauthorized access to personal or health data. GDPR requires protection of personal data, and HIPAA mandates safeguards for protected health information. A breach could result in legal penalties or fines.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Support Genix WordPress plugin to version 1.4.48 or later immediately. If an update is not available, disable the plugin temporarily. Review server file permissions to restrict access to sensitive files. Monitor network traffic for suspicious activity targeting the plugin's endpoints.

Useful 0 Not Useful 0