Vulnerability · Published May 14, 2021 · Assigned by WPScan
CVE-2021-24284Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File Upload
Critical 9.8
In plain English
A critical-severity unrestricted file upload in Kaswara Modern VC Addons from SayenThemes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 42.1% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)42.1%top 1.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Nuclei
Official description
The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SayenThemes | Kaswara Modern VC Addons | 3.0.1 – through 3.0.1 |
Weakness: CWE-434
References
- https://wpscan.com/vulnerability/8d66e338-a88f-4610-8d12-43e8be2da8c5 x_refsource_CONFIRM
- https://codecanyon.net/item/kaswara-modern-visual-composer-addons/19341477 x_refsource_MISC
- http://packetstormsecurity.com/files/167743/WordPress-Kaswara-Modern-WPBakery-Page-Builder-3.0.1-File-Upload.html x_refsource_MISC