PT-2021-3989 · WordPress · Rsvpmaker

Shreya Pohekar · Published 2021-05-14 · Updated 2023-09-30 · CVE-2021-24371

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RSVPMaker WordPress plugin versions prior to 8.7.3

Description The issue is related to the Import feature of the RSVPMaker WordPress plugin, specifically with the "/wp-admin/tools.php?page=rsvpmaker export screen" endpoint. It is caused by insufficient validation of incoming requests, allowing a remote attacker to perform a Server-Side Request Forgery (SSRF) attack. This could enable a high-privilege user to scan the internal network.

Recommendations For versions prior to 8.7.3, update to version 8.7.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/wp-admin/tools.php?page=rsvpmaker export screen" endpoint to minimize the risk of exploitation. Additionally, restrict the use of the curl function with unvalidated URL inputs until the issue is resolved.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2021-04510

CVE-2021-24371

Affected Products

Rsvpmaker

References · 8

• 🔥 https://wpscan.com/vulnerability/63be225c-ebee-4cac-b43e-cf033ee7425d · Exploit
• 🔥 https://codevigilant.com/disclosure/2021/wp-plugin-rsvpmaker · Exploit
• https://osv.dev/vulnerability/CVE-2021-24371 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24371 · Security Note
• https://bdu.fstec.ru/vul/2021-04510 · Security Note
• https://sploitus.com/exploit?id=WPEX-ID:63BE225C-EBEE-4CAC-B43E-CF033EE7425D · Note
• https://t.me/cvenotify/18960 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/2536674/rsvpmaker · Note