Information Disclosure and Data Modification in Article2PDF Plugin by WordPress

CVE-2019-1010257

Summary

The Article2PDF WordPress plugin is susceptible to an information disclosure and data modification vulnerability via the article2pdf_getfile.php file. By constructing a specific URL, attackers can override the path to PDF files, potentially allowing unauthorized access to PDF documents that the web server can read. Furthermore, if permissible by the server's configuration, downloaded files may be deleted post-retrieval. Additionally, on PHP versions preceding 5.3, a null termination exploit could permit reading of any file by manipulating the string prior to the extension.

References