Paulmockford

Name of the Vulnerable Software and Affected Versions: Woocommerce Blocks – Woolook plugin for WordPress versions prior to 1.7.1 Description: The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion via the `tab` parameter. This allows authenticated attackers with Administrator-level access and above to include and execute arbitrary files on the server, potentially enabling them to bypass access controls, obtain sensitive data, or achieve code execution. This is possible even when images and other typically safe file types are uploaded and included. The issue can also be exploited using Cross-Site Request Forgery (CSRF) techniques. Recommendations: Update the Woocommerce Blocks – Woolook plugin to version 1.7.1 or later.

Name of the Vulnerable Software and Affected Versions: WordPress Post Grid Layouts with Pagination – Sogrid plugin versions up to, and including, 1.5.2 Description: The issue allows authenticated attackers with Administrator-level access and above to include and execute arbitrary files on the server via the `tab` parameter. This enables the execution of any PHP code in those files, which can be used to bypass access controls, obtain sensitive data, or achieve code execution, especially in cases where images and other “safe” file types can be uploaded and included. The issue can also be exploited via CSRF techniques. Recommendations: For versions up to, and including, 1.5.2, consider disabling the `tab` parameter functionality until a patch is available to prevent exploitation. Restrict access to sensitive files and directories to minimize the risk of arbitrary file inclusion and execution. Avoid using the `tab` parameter in API endpoints until the issue is resolved. As a temporary workaround, restrict Administrator-level access and above to trusted users only.