PT-2019-19273 · WordPress · Wordpress

Allyshka · Published 2019-02-20 · Updated 2021-07-21 · CVE-2019-8942

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.9.9 WordPress versions 5.x prior to 5.0.1

Description The issue allows remote code execution. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif metadata.

Recommendations For WordPress versions prior to 4.9.9, update to version 4.9.9 or later. For WordPress versions 5.x prior to 5.0.1, update to version 5.0.1 or later.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-8942

DLA-1742-1

DSA-4401-1

Affected Products

Wordpress

References · 41

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_crop_rce.rb · Exploit
• 🔥 https://github.com/brianwrf/WordPress_4.9.8_RCE_POC · Exploit
• 🔥 https://github.com/synacktiv/CVE-2019-8942 · Exploit
• 🔥 https://github.com/nth347/CVE-2018-20148_exploit · Exploit
• 🔥 https://github.com/sijiahi/Wordpress_cve-2019-9787_defense · Exploit
• 🔥 https://lists.debian.org/debian-lts-announce/2019/03/msg00044.html · Exploit
• 🔥 http://rapid7.com/db/modules/exploit/multi/http/wp_crop_rce · Exploit
• 🔥 https://exploit-db.com/exploits/46662 · Exploit
• 🔥 https://exploit-db.com/exploits/46511 · Exploit
• 🔥 http://packetstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.html · Exploit
• 🔥 https://blog.ripstech.com/2019/wordpress-image-remote-code-execution · Exploit
• https://security-tracker.debian.org/tracker/CVE-2019-8942 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20150 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-8942 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20147 · Security Note