Path Traversal Vulnerability in YARPP Allows PHP Local File Inclusion

CVE-2022-45374

What is CVE-2022-45374?

The YARPP (Yet Another Related Posts Plugin) for WordPress is susceptible to a Path Traversal vulnerability that allows an attacker to exploit improper limitations on pathname input. This vulnerability can lead to PHP Local File Inclusion, posing a significant risk of unauthorized access to sensitive files on the server. It is essential for WordPress administrators using YARPP from inexistent to version 5.30.4 to assess their security posture and implement necessary updates or mitigations.

References