PT-2020-12206 · WordPress · File Upload

P4W + 1 · Published 2020-03-13 · Updated 2020-03-19 · CVE-2020-10564

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions File Upload plugin versions prior to 4.13.0 for WordPress

Description The issue allows for directory traversal, potentially leading to remote code execution. This can be achieved by uploading a specially crafted txt file into the lib directory due to a wfu include lib call.

Recommendations For versions prior to 4.13.0, update to version 4.13.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the file upload functionality to minimize the risk of exploitation.

Exploit

Fix

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-10564

Affected Products

File Upload

References · 6

• 🔥 https://github.com/beerpwn/CVE/tree/master/WP-File-Upload_disclosure_report · Exploit
• https://wordpress.org/plugins/wp-file-upload/#developers · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10564 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10564 · Vendor Advisory
• https://t.me/cvenotify/1685 · Telegram Post
• https://wpvulndb.com/vulnerabilities/10132 · Note