PT-2025-9038 · WordPress · The Traveler

István Márton

·

Publicado

2025-02-27

·

Atualizado

2025-03-05

·

CVE-2024-12811

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions The Traveler theme for WordPress versions up to, and including, 3.1.8
Description The issue allows authenticated attackers with contributor-level and above permissions to include and execute arbitrary files on the server via the hotel alone slider shortcode style attribute. This enables the execution of any PHP code in those files, potentially bypassing access controls, obtaining sensitive data, or achieving code execution if PHP file types can be uploaded and included.
Recommendations For versions up to, and including, 3.1.8, update to a version that fixes this issue to prevent Local File Inclusion attacks. As a temporary workaround, consider restricting access to the hotel alone slider shortcode or disabling the style attribute to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-98

Identificadores relacionados

CVE-2024-12811

Produtos afetados

The Traveler