BuddyPress plugin vulnerable to Directory Traversal on Windows

CVE-2024-10011

Summary

The BuddyPress plugin for WordPress is vulnerable to a Directory Traversal issue affecting all versions up to and including 14.1.0, specifically via the id parameter. This flaw allows authenticated attackers with Subscriber-level access or higher to execute operations on files located outside the designated directory. Consequently, this can enable file uploads to directories beyond the web root. Depending on specific server configurations, there lies a risk of files being uploaded with double extensions. Notably, this vulnerability impacts Windows environments.

References