CyberRota Analysis
AI-GeneratedThe Prevent Direct Access – Protect WordPress Files plugin is vulnerable to unauthorized access to protected files due to inadequate token validation in the `get_advance_file_by_url()` method, affecting all versions up to 2.8.8.8. Attackers can exploit this flaw by using SQL wildcard characters to bypass token requirements, potentially allowing them to download any protected file. WordPress site administrators using this plugin should prioritize patching or updating to mitigate the risk of unauthorized file access.
Original NVD Description
The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of protected files due to insufficient token validation in the `get_advance_file_by_url()` method in all versions up to, and including, 2.8.8.8 The method uses a SQL `LIKE` operator for token lookup without escaping wildcard characters via `$wpdb->esc_like()`. This makes it possible for unauthenticated attackers to bypass the private token requirement by supplying SQL wildcard characters (such as `%`) as the token value, matching any record in the plugin's file table and downloading any protected file.