WordPress JS Help Desk Plugin <= 2.9.2 - Arbitrary File Deletion vulnerability

An attacker can leverage this path traversal vulnerability to read arbitrary files from the server hosting JS Help Desk. This could include sensitive configuration files, database credentials, or even source code. Successful exploitation could lead to complete compromise of the web server and potentially the entire WordPress instance. The impact is particularly severe if the server hosts other sensitive applications or data. This vulnerability shares similarities with other path traversal exploits, where attackers manipulate file paths to bypass security restrictions.

WordPress websites utilizing the JS Help Desk plugin, particularly those running versions 0.0.0 through 2.9.2, are at risk. Shared hosting environments where users have limited control over server configurations are especially vulnerable, as they may not be able to implement WAF rules or adjust file permissions effectively.

• wordpress / composer / npm:

grep -r '../' /var/www/html/wp-content/plugins/js-help-desk/*

• generic web:

curl -I 'https://example.com/js-help-desk/index.php?file=../../../../etc/passwd' # Check for 200 OK response indicating file access

1. 2025-04-01Disclosure

   disclosure

1. Reserviert2025-03-26
2. Veröffentlicht2025-04-01
3. Geändert2026-04-28
4. EPSS aktualisiert2026-03-23

The primary mitigation is to immediately upgrade JS Help Desk to version 2.9.3 or later. If upgrading is not immediately feasible, consider implementing temporary workarounds. These include restricting file permissions on the server to limit the attacker's ability to read sensitive files. Web Application Firewall (WAF) rules can be configured to block requests containing suspicious path traversal sequences (e.g., ../). Thoroughly review and harden the server's configuration to minimize the potential impact of a successful exploit.

Aktive Installationen

8KBekannt

Plugin-Bewertung