CVE-2024-54375: Path Traversal in Woolook WordPress Plugin

The Path Traversal vulnerability in Woolook allows an attacker to bypass intended file access restrictions. By manipulating file paths, an attacker can include files outside of the intended directory, such as system files or configuration files. Successful exploitation could lead to the disclosure of sensitive information, such as database credentials or application code. In a worst-case scenario, an attacker could leverage this vulnerability to execute arbitrary PHP code on the server, gaining complete control over the WordPress installation. This is similar to other Local File Inclusion vulnerabilities that have been exploited to compromise WordPress sites.

1. Reserved2024-12-02
2. Published2024-12-16
3. EPSS updated2026-04-02

The primary mitigation for CVE-2024-54375 is to immediately upgrade the Woolook WordPress plugin to version 1.7.1 or later. If upgrading is not immediately feasible due to compatibility concerns or breaking changes, consider implementing a Web Application Firewall (WAF) rule to block requests containing path traversal attempts (e.g., ../ sequences). Additionally, restrict file permissions on sensitive files to prevent unauthorized access. Monitor WordPress access logs for suspicious file inclusion attempts. After upgrading, confirm the vulnerability is resolved by attempting a path traversal request and verifying that access is denied.