An authenticated path traversal vulnerability in the WP Maps WordPress plugin allows unauthorized access to sensitive filesystem data.

This plugin is susceptible to path traversal (CWE-22) because it fails to properly sanitize user input when processing file paths. An attacker with low-level authenticated access can manipulate these paths to read files outside the intended directory.

This vulnerability could allow an attacker to retrieve sensitive configuration files, such as wp-config.php, which often contain database credentials and secret keys. With a CVSS score of 8.8, this vulnerability poses a severe risk of data breach and potential remote code execution through secondary exploitation of leaked credentials.

Immediate Action: Update the WP Maps plugin to version 4.9.7 or the latest available version immediately.

Proactive Monitoring: Monitor server logs for file access requests containing directory traversal sequences, such as dot-dot-slash patterns.

Compensating Controls: Ensure the web server process runs with the least privilege necessary to restrict access to sensitive files outside the web root.

Public Exploit Available: No

Organizations should treat this vulnerability with high urgency. Because a proof-of-concept exists, the barrier to entry for an attacker is significantly lowered. Update the plugin immediately to prevent unauthorized file access and potential further system compromise.