Threats tagged 'ghsa-fr9g-x87r-278g'

The ELEX WordPress HelpDesk & Customer Ticketing System plugin up to version 3.3.8 contains a critical vulnerability allowing unauthenticated attackers to delete arbitrary files on the server. This occurs due to insufficient file path validation in the factory_reset function. Exploitation involves a two-step process where an attacker first submits a ticket to set a malicious file path, then triggers the factory reset functionality, which lacks proper capability checks. Deleting sensitive files like wp-config.php can lead to remote code execution.