PT-2021-3415 · WordPress · Wordpress Classifieds Plugin

Jin Huang + 1 · Published 2021-05-05 · Updated 2021-05-14 · CVE-2021-24253

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Classyfrieds WordPress plugin versions prior to 3.8

Description The issue is related to unrestricted file uploads of dangerous types. Exploitation of this issue may allow a remote attacker to upload and execute arbitrary files. Specifically, the plugin does not properly check uploaded files when an authenticated user adds a listing, only verifying the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature, leading to remote code execution.

Recommendations For Classyfrieds WordPress plugin versions prior to 3.8, update to a version that properly checks and restricts file uploads to prevent arbitrary file execution. As a temporary workaround, consider disabling the file upload feature in the Add Listing section of the plugin until a secure update is available. Restrict access to the plugin's file upload functionality to minimize the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2021-03267

CVE-2021-24253

Affected Products

Wordpress Classifieds Plugin

References · 5

• 🔥 https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/classyfrieds.md · Exploit
• 🔥 https://wpscan.com/vulnerability/ee42c233-0ff6-4b27-a5ec-ad3246bef079 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24253 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24253 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03267 · Security Note