CVE-2018-25325

Description

Woocommerce CSV Importer 3.3.6 contains a path traversal vulnerability that allows any registered user to delete arbitrary files by submitting unescaped filenames through the delete_export_file AJAX action. Attackers can craft POST requests with directory traversal sequences in the filename parameter to delete sensitive files like wp-config.php outside the intended export directory.

CVSS Vector

References

• http://lenonleite.com.br/
• https://www.exploit-db.com/exploits/44433
• https://www.vulncheck.com/advisories/woocommerce-csv-importer-path-traversal-file-deletion