Quttera Web Malware Scanner < 3.4.2.1 - Admin+ Path Traversal

CVE-2023-6222

Summary

The Quttera Web Malware Scanner WordPress plugin fails to properly validate user input in a file path, which creates a vulnerability for users with admin roles. This flaw can potentially allow admins to execute unauthorized file access, exploiting the pathway to sensitive files on the server. Prompt updates to version 3.4.2.1 or later are necessary to mitigate this risk and secure your WordPress site against potential threats.

References