WP Compress < 6.10.34 - Unauthenticated Arbitrary File Read

2024-01-0300:00:00

wpscan.com

vulnerable plugin

directory traversal

unauthenticated attackers

arbitrary files

sensitive information

server

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

40.5%

JSON

Description The plugin is vulnerable to Directory Traversal via the css parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

References

www.wordfence.com/threat-intel/vulnerabilities/id/defb87dd-bf5f-411f-b948-699337d05d44