A critical path traversal vulnerability in the RapiSafe WordPress plugin allows unauthenticated attackers to delete arbitrary files, potentially resulting in full system compromise.

This flaw exists due to insufficient validation in the handleAjaxRemoveUpload function, allowing unauthenticated attackers to perform path traversal. By leveraging a publicly exposed nonce, an attacker can delete sensitive server files, such as wp-config.php, to facilitate remote code execution.

Successful exploitation allows an attacker to delete critical application files, leading to immediate service disruption and potential remote code execution. Given the CVSS score of 9.1, this vulnerability poses a severe threat to data integrity and system availability, warranting immediate attention.

Immediate Action: As no patch is currently available, disable or uninstall the RapiSafe plugin immediately until a secure version is released by the vendor.

Proactive Monitoring: Monitor server access logs for anomalous requests targeting the handleAjaxRemoveUpload function or unusual attempts to access core configuration files.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block requests containing path traversal sequences or unauthorized calls to the plugin's AJAX endpoints.

Public Exploit Available: Unknown

The severity of this vulnerability necessitates an immediate response. Because no fix has been released, administrators must prioritize the removal of the plugin from their environment to prevent potential site takeover.