CyberRota Analysis
AI-GeneratedThe Prime Mover plugin for WordPress prior to version 2.2.1 is vulnerable to a Zip Slip path traversal flaw, allowing authenticated administrators to extract ZIP files to unintended locations on the filesystem. This could enable attackers to write malicious files, potentially leading to remote code execution if those files are executed by the web server. WordPress site administrators using this plugin should prioritize immediate updates to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the intended extraction directory during migration ZIP import. Attackers can craft ZIP entry names with traversal sequences processed by computeExtractionParameters() and resumableZipExtractor() in utilities/PrimeMoverSystemCheckUtilities.php to write attacker-controlled content to arbitrary filesystem locations, potentially achieving remote code execution if the written files are interpreted by the web environment.