Backup by Supsystic <= 2.3.11 - Cross-Site Request Forgery to Arbitrary File Download/Deletion
Strategic Overview
Vulnerability Overview
The Backup by Supsystic plugin for WordPress is vulnerable to Arbitrary File Download and Deletion in versions up to, and including, 2.3.11. This is due to various path traversal attacks and missing CSRF checks. This makes it possible for authenticated Admin+ attackers to download and delete any file on the vulnerable server and also allows unauthenticated attackers to delete files.
Technical Analysis
REMEDIATION: Update to version 2.3.12, or a newer patched version --- IDENTIFIER: CWE-352 (Cross-Site Request Forgery (CSRF)) The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C