PT-2018-18591 · Woocommerce · Woocommerce Products Filter

Published 2018-03-14 · Updated 2018-04-12 · CVE-2018-8711

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WooCommerce Products Filter plugin versions prior to 2.2.0

Description A local file inclusion issue was discovered due to the lack of args/input validation on the render html function before allowing it to be called by the extract() function, a PHP built-in function. This allows the supplied args/input to overwrite the $pagepath variable, potentially leading to a local file inclusion attack. The issue can be demonstrated by the shortcode parameter in a woof redraw woof action.

Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the render html function until a patch is available. Restrict access to the woof redraw woof action to minimize the risk of exploitation. Avoid using the shortcode parameter in the affected action until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-8711

Affected Products

Woocommerce Products Filter

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-8711 · Security Note
• https://osv.dev/vulnerability/CVE-2018-8711 · Vendor Advisory
• https://woocommerce-filter.com/update-woocommerce-products-filter-v-2-2-0 · Vendor Advisory
• https://wordpress.org/plugins/woocommerce-products-filter/#developers · Note
• https://sec-consult.com/en/blog/advisories/arbitrary-shortcode-execution-local-file-inclusion-in-woof-pluginus-net/index.html · Note