PT-2020-15865 · WordPress · Autoptimize

Published 2020-09-03 · Updated 2021-06-21 · CVE-2020-24948

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autoptimize Wordpress Plugin version 2.7.6

Description The issue arises from the ao ccss import AJAX call, which fails to verify if the uploaded file is a legitimate Zip file. This allows high-privilege users to upload arbitrary files, including PHP files, leading to remote command execution.

Recommendations For Autoptimize Wordpress Plugin version 2.7.6, consider disabling the ao ccss import AJAX call until a patch is available to prevent the upload of arbitrary files. Restrict access to this functionality to minimize the risk of exploitation. Avoid using this feature until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-24948

Affected Products

Autoptimize

References · 6

• 🔥 http://packetstormsecurity.com/files/160850/WordPress-Autoptimize-Shell-Upload.html · Exploit
• 🔥 https://wpvulndb.com/vulnerabilities/10372 · Exploit
• https://osv.dev/vulnerability/CVE-2020-24948 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24948 · Security Note
• https://t.me/cibsecurity/25587 · Telegram Post
• https://t.me/cvenotify/8335 · Telegram Post