A high-severity information exposure vulnerability in the Workeera WordPress plugin allows authenticated users to read sensitive server files, including configuration data and authentication secrets.

This vulnerability is caused by a failure to perform adequate input validation on profile submissions and a lack of directory traversal protection, which permits any authenticated user with subscriber-level access to access files outside the intended web directory.

The ability for low-privileged users to read arbitrary files poses a significant risk to the integrity and confidentiality of the entire hosting environment. An attacker could extract database credentials, configuration files, or encryption keys, which typically leads to full system compromise or unauthorized access to sensitive user data. The CVSS score of 7.7 reflects the high potential for impact on the confidentiality of the affected server.

Immediate Action: Update the Workeera plugin to version 1.0.6 or later immediately to apply the necessary input validation and directory path restrictions.

Proactive Monitoring: Review web server access logs for anomalous requests targeting sensitive system files or unexpected file path patterns associated with profile updates.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block requests containing directory traversal sequences, such as dot-dot-slash patterns, directed at the plugin functionality.

Public Exploit Available: Unknown

Given the potential for complete system compromise through the exposure of authentication secrets, this vulnerability should be treated with high urgency. Administrators must prioritize updating the plugin to the fixed version to prevent unauthorized access. If an immediate update is not feasible, restrict access to the plugin settings or temporarily deactivate the component to mitigate the risk of data exfiltration.