Sucuri Wordpress Plugin
Monthly
Path traversal in the Sucuri Security WordPress plugin through version 2.7.3 allows authenticated administrators to delete arbitrary files outside the WordPress installation directory. The pageIntegritySubmission() method in src/integrity.lib.php concatenates the unsanitized sucuriscan_integrity parameter directly with ABSPATH before passing it to PHP's unlink(), enabling traversal sequences to reach sensitive files such as wp-config.php and .htaccess. A publicly available exploit exists (reported by VulnCheck); no CISA KEV listing has been confirmed, but file deletion of wp-config.php can cause immediate site outage and enable full WordPress reinstallation by a follow-on attacker.
Path traversal in the Sucuri Security WordPress plugin through version 2.7.3 allows authenticated administrators to delete arbitrary files outside the WordPress installation directory. The pageIntegritySubmission() method in src/integrity.lib.php concatenates the unsanitized sucuriscan_integrity parameter directly with ABSPATH before passing it to PHP's unlink(), enabling traversal sequences to reach sensitive files such as wp-config.php and .htaccess. A publicly available exploit exists (reported by VulnCheck); no CISA KEV listing has been confirmed, but file deletion of wp-config.php can cause immediate site outage and enable full WordPress reinstallation by a follow-on attacker.