Directory Traversal Vulnerability in Paid Memberships Pro Plugin for WordPress

CVE-2014-8801

Summary

The Paid Memberships Pro plugin for WordPress contains a directory traversal vulnerability in the services/getfile.php file. This security loophole allows remote attackers to exploit the plugin by manipulating the QUERY_STRING parameter during a getfile action directed at wp-admin/admin-ajax.php. By inserting a .. (dot dot) sequence, attackers can gain unauthorized access to arbitrary files on the server, potentially leading to exposure of sensitive information. Users of versions prior to 1.7.15 are particularly at risk and are strongly urged to update to the latest version to mitigate this vulnerability.

References