Directory Traversal Vulnerability in WPvivid Plugin for WordPress

CVE-2023-4274

Summary

The WPvivid plugin for WordPress, up to version 0.9.89, is susceptible to a directory traversal vulnerability. This flaw permits authenticated users with administrative rights to traverse directories on the server, enabling them to delete files in arbitrary locations. Such exploitation can result in significant data loss and compromises server integrity, particularly in shared hosting environments. Therefore, website administrators should ensure they are using the latest version of the plugin to mitigate this risk.

References