PT-2021-16136 · WordPress · Wordpress Simple Ecommerce Shopping Cart Plugin- Sell Products Through Paypal

Fellipe Oliveira + 1 · Published 2021-09-13 · Updated 2022-10-25 · CVE-2021-24620

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin versions 2.2.5 and earlier

Description The issue allows any file, such as PHP, to be uploaded by an administrator due to a lack of checks for uploaded Downloadable Digital product files. Additionally, the absence of CSRF protection enables attackers to make a logged-in admin upload a malicious PHP file, leading to remote code execution (RCE).

Recommendations For WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin versions 2.2.5 and earlier, update to a version later than 2.2.5 to resolve the issue. As a temporary workaround, consider restricting file uploads to only necessary file types and implementing CSRF protection to minimize the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

CSRF

Weakness Enumeration

CWE-434

CWE-352

Related Identifiers

CVE-2021-24620

Affected Products

Wordpress Simple Ecommerce Shopping Cart Plugin- Sell Products Through Paypal

References · 5

• 🔥 https://wpscan.com/vulnerability/1f2b3c4a-f7e9-4d22-b71e-f6b051fd8349 · Exploit
• https://osv.dev/vulnerability/CVE-2021-24620 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24620 · Security Note
• https://t.me/cvenotify/21527 · Telegram Post
• https://t.me/cybersecuritytechnologies/4454 · Telegram Post