Path Traversal Vulnerability in Cherry Plugin for WordPress

CVE-2016-20103

What is CVE-2016-20103?

The Cherry Plugin for WordPress prior to version 1.2.7 exhibits a path traversal vulnerability, allowing unauthenticated attackers to exploit the 'file' parameter to download sensitive files. By crafting specific GET requests to the /admin/import-export/download-content.php script and utilizing traversal sequences such as ../../../../../wp-config.php, attackers can access critical files, including database credentials. This vulnerability poses a significant risk by permitting unauthorized access to sensitive data.

References