EIP-2026-114191
PRE-CVEWordPress Plugin Woo Import Export 1.0 - Arbitrary File Deletion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114191. PoCs published by Lenon Leite.
AI-analyzed exploit summary This exploit demonstrates an arbitrary file deletion vulnerability in the Woo Import Export Lite WordPress plugin (version 1.0). The vulnerability arises from unsanitized user input in the 'file_name' parameter, allowing an authenticated attacker to delete critical files like 'wp-config.php' via a directory traversal attack.
Description
WordPress Plugin Woo Import Export 1.0 - Arbitrary File Deletion
Exploits (1)
This exploit demonstrates an arbitrary file deletion vulnerability in the Woo Import Export Lite WordPress plugin (version 1.0). The vulnerability arises from unsanitized user input in the 'file_name' parameter, allowing an authenticated attacker to delete critical files like 'wp-config.php' via a directory traversal attack.