Vulnerability · Published Nov 17, 2021 · Assigned by Wordfence
CVE-2021-42362WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload
High 8.8
In plain English
A high-severity unrestricted file upload in WordPress Popular Posts from WordPress Popular Posts. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 79.8% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, public proof-of-concept code.
Official description
The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain remote code execution, in versions up to and including 5.3.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WordPress Popular Posts | WordPress Popular Posts | 0.0 – through 5.3.2 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://blog.nintechnet.com/improper-input-validation-fixed-in-wordpress-popular-posts-plugin/ x_refsource_MISC
- https://www.wordfence.com/vulnerability-advisories/#CVE-2021-42362 x_refsource_MISC
- https://plugins.trac.wordpress.org/changeset/2542638/wordpress-popular-posts/trunk/src/Image.php x_refsource_MISC
- https://wpscan.com/vulnerability/bd4f157c-a3d7-4535-a587-0102ba4e3009 x_refsource_MISC
- http://packetstormsecurity.com/files/165376/WordPress-Popular-Posts-5.3.2-Remote-Code-Execution.html x_refsource_MISC
- https://github.com/cabrerahector/wordpress-popular-posts/commit/d9b274cf6812eb446e4103cb18f69897ec6fe601 patch