WooCommerce Support Ticket System Plugin Vulnerable to Arbitrary File Deletion

CVE-2024-10626

Summary

The WooCommerce Support Ticket System plugin for WordPress has a security vulnerability that allows authenticated users with Subscriber-level access or higher to delete arbitrary files on the server. This vulnerability arises from inadequate validation of file paths in the delete_uploaded_file() function across all versions up to and including 17.7. When a malicious user deletes critical files (such as wp-config.php), it can potentially lead to remote code execution, compromising the integrity and security of the affected WordPress installation.

References