PT-2018-17400 · WordPress · Wp-Splashing-Images

Published 2018-01-30 · Updated 2022-12-02 · CVE-2018-6195

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions wp-splashing-images versions prior to 2.1.1

Description The issue allows authenticated remote attackers, with roles such as administrator, editor, or author, to conduct PHP Object Injection attacks. This is achieved by sending crafted serialized data in the session HTTP GET parameter to the "wp-admin/upload.php" endpoint.

Recommendations For versions prior to 2.1.1, update to version 2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "wp-admin/upload.php" endpoint for non-administrator users until the update is applied.

Exploit

Fix

Prototype Pollution

Weakness Enumeration

CWE-1321

Related Identifiers

CVE-2018-6195

Affected Products

Wp-Splashing-Images

References · 6

• 🔥 http://seclists.org/fulldisclosure/2018/Jan/91 · Exploit
• 🔥 http://packetstormsecurity.com/files/146109/WordPress-Splashing-Images-2.1-Cross-Site-Scripting-PHP-Object-Injection.html · Exploit
• https://plugins.trac.wordpress.org/changeset/1807349/wp-splashing-images · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6195 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6195 · Vendor Advisory
• https://wpvulndb.com/vulnerabilities/9015 · Note