PT-2022-11579 · WordPress · Sp Project & Document Manager

Pang0Lin · Published 2022-04-25 · Updated 2022-05-03 · CVE-2021-4225

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SP Project & Document Manager WordPress plugin versions prior to 4.24

Description The issue allows any authenticated users to upload files, despite the plugin's attempt to prevent PHP and other executable files from being uploaded by checking the file extension. On Windows servers, the security checks are insufficient, enabling potential uploads of backdoors on vulnerable sites.

Recommendations For versions prior to 4.24, update to version 4.24 or later to resolve the issue. As a temporary workaround, consider restricting file uploads for authenticated users, such as subscribers, until the update is applied.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-4225

Affected Products

Sp Project & Document Manager

References · 5

• 🔥 https://github.com/pang0lin/CVEproject/blob/main/wordpress_SP-Project_fileupload.md · Exploit
• 🔥 https://wpscan.com/vulnerability/bd1083d1-edcc-482e-a8a9-c8b6c8d417bd · Exploit
• https://osv.dev/vulnerability/CVE-2021-4225 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4225 · Security Note
• https://t.me/cibsecurity/41410 · Telegram Post