Path Traversal Vulnerability Affects Sendinblue for WooCommerce

CVE-2024-32807

Summary

A path traversal vulnerability exists in Brevo's Sendinblue for WooCommerce plugin, allowing attackers to execute unauthorized file system operations. This issue stems from improper limitations on pathname handling, enabling relative path traversal by manipulating web input. As a result, an attacker could potentially access or manipulate restricted files on the server hosting the e-commerce platform. This vulnerability impacts all versions of Sendinblue for WooCommerce up to version 4.0.17, posing risks to users' data security and privacy.

References