PT-2021-15918 · Unknown · Filebird Plugin

Ravi Chandra · Published 2021-07-12 · Updated 2021-07-15 · CVE-2021-24385

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Filebird Plugin version 4.7.3

Description The issue arises from the plugin making SQL queries without properly escaping user input data from HTTP post requests, allowing for SQL injection. This is exacerbated by the lack of required permissions or authentication for the Rest API endpoint that invokes the vulnerable function, making it accessible to anonymous users.

Recommendations For Filebird Plugin version 4.7.3, consider disabling the Rest API endpoint that invokes the vulnerable function until a patch is available, and ensure that all user input data is properly escaped to prevent SQL injection. Restrict access to the endpoint to require proper authentication and permissions to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-24385

Affected Products

Filebird Plugin

References · 4

• 🔥 https://wpscan.com/vulnerability/754ac750-0262-4f65-b23e-d5523995fbfa · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24385 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24385 · Vendor Advisory
• https://10up.com/blog/2021/security-vulnerability-filebird-wordpress-plugin · Note