Workeera WordPress Plugin Arbitrary File Read Vulnerability

Executive Summary

This vulnerability exists in the Workeera WordPress plugin before version 1.0.6. It allows authenticated users with subscriber-level access or higher to read arbitrary files on the server through a mass assignment flaw in candidate profile handling. The plugin fails to restrict which profile values can be submitted and does not validate file storage locations before serving them.

Useful 0 Not Useful 0

Detection Guidance

Check if the Workeera WordPress plugin version is below 1.0.6. Inspect server logs for unauthorized file access attempts by subscribers. Review candidate profile submissions for suspicious file path inputs.

Useful 0 Not Useful 0

Impact Analysis

An attacker with subscriber access could exploit this to read sensitive files on the server, including configuration files and authentication secrets. This could lead to further compromise of the WordPress site or the underlying server.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. It may result in data breaches and non-compliance penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Workeera plugin to version 1.0.6 or later immediately. Restrict subscriber-level access to sensitive areas until patched. Monitor for unusual file access patterns.

Useful 0 Not Useful 0