Aspose Importer & Exporter for WordPress before version 3.0 contains a path traversal flaw in the aspose_import_export_download.php script that permits unauthenticated attackers to request arbitrary files by using the unsanitized 'file' parameter. An attacker can construct a GET request with traversal sequences such as ../../../wp-config.php to read sensitive information like database credentials. The vulnerability directly compromises the confidentiality of the website’s files and may expose credentials that can lead to full system compromise.

The affected product is Aspose Importer & Exporter for WordPress. All installations of the plugin with a version older than 3.0 are vulnerable. The specific vulnerable script is aspose_import_export_download.php, which is accessible without authentication.

The CVSS score of 8.7 indicates high severity, while the EPSS score is not available, implying no published exploitation probability data. The vulnerability is not listed in the CISA KEV catalog. Exploitation is possible with a simple HTTP GET request, and no authentication is required. Therefore, any publicly exposed WordPress site using the vulnerable plugin is at significant risk of unauthorized file download and potential data breach.