The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, to read arbitrary files on the web server
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
| Link | Tags |
|---|---|
| https://wpscan.com/vulnerability/c6bb12b1-6961-40bd-9110-edfa9ee41a18 | third party advisory exploit |