A critical path traversal vulnerability in the AmentoTech Workreap plugin enables authenticated attackers to delete arbitrary files, potentially leading to a complete service disruption.

The plugin fails to properly validate input paths, resulting in a path traversal vulnerability (CWE-22). An authenticated user can leverage this flaw to delete files on the host server, which can cause significant system instability or denial of service.

The ability for an attacker to delete arbitrary files poses a severe threat to business continuity. Successful exploitation could lead to the deletion of critical configuration files, core application code, or database backups, resulting in extended system downtime and potential data loss. With a CVSS score of 7.6, this vulnerability represents a high-risk entry point that necessitates immediate attention to prevent operational disruption.

Immediate Action: Check the vendor website for the latest security release and update the Workreap plugin to the version that addresses this vulnerability. If an update is not yet available, consider disabling the plugin until a patch is released.

Proactive Monitoring: Review web server access logs for unusual requests containing directory traversal sequences, such as dot-dot-slash patterns, directed at the Workreap plugin endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block path traversal attempts, which can provide temporary protection while awaiting vendor patches.

Public Exploit Available: Unknown

Given the potential for system-wide impact through arbitrary file deletion, administrators must treat this vulnerability as a priority. Ensure that the Workreap plugin is monitored closely and updated immediately upon the release of a security patch to neutralize the threat.