CVE-2024-12152 | mulika MIPL WC Multisite Sync Plugin up to 1.1.5 on WordPress Arbitrary File mipl_wc_sync_download_log path traversal

A vulnerability classified as critical was found in mulika MIPL WC Multisite Sync Plugin up to 1.1.5 on WordPress. This vulnerability affects the function mipl_wc_sync_download_log of the component Arbitrary File Handler. The manipulation leads to path traversal.

This vulnerability was named CVE-2024-12152. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.