PT-2021-22558 · WordPress · Catch Themes Demo Import

Published 2021-10-21 · Updated 2022-02-28 · CVE-2021-39352

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Catch Themes Demo Import WordPress plugin versions up to and including 1.7

Description: The issue is related to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, due to insufficient file type validation. This allows an attacker with administrative privileges to upload malicious files, potentially leading to remote code execution.

Recommendations: For versions up to and including 1.7, consider disabling the import functionality in the ~/inc/CatchThemesDemoImport.php file as a temporary workaround until a patch is available. Restrict access to the import functionality to minimize the risk of exploitation. Avoid using the import functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-39352

Affected Products

Catch Themes Demo Import

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_catch_themes_demo_import.rb · Exploit
• 🔥 https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2021-39352 · Exploit
• 🔥 http://packetstormsecurity.com/files/165207/WordPress-Catch-Themes-Demo-Import-1.6.1-Shell-Upload.html · Exploit
• 🔥 https://exploit-db.com/exploits/50580 · Exploit
• 🔥 https://github.com/BigTiger2020/word-press/blob/main/Catch%20Themes%20Demo%20Import.md · Exploit
• https://osv.dev/vulnerability/CVE-2021-39352 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/2617555/catch-themes-demo-import/trunk/inc/CatchThemesDemoImport.php · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-39352 · Security Note
• https://t.me/cibsecurity/30996 · Telegram Post
• https://wordfence.com/vulnerability-advisories/#CVE-2021-39352 · Note
• https://t.me/cvenotify/22530 · Telegram Post
• http://packetstormsecurity.com/files/165463/WordPress-Catch-Themes-Demo-Import-Shell-Upload.html · Note