Vulnerability · Published Dec 24, 2024 · Assigned by Wordfence
CVE-2024-12881PlugVersions – Easily rollback to previous versions of your plugins <= 0.0.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Creation
High 8.8
In plain English
A high-severity missing authorization in PlugVersions – Easily roll back to previous versions of your plugins. from giuse. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Official description
The PlugVersions – Easily rollback to previous versions of your plugins plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the eos_plugin_reviews_restore_version() function in all versions up to, and including, 0.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary files leveraging files included locally.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| giuse | PlugVersions – Easily roll back to previous versions of your plugins. | 0 – through 0.0.7 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H