PT-2022-14107 · WordPress · Filr

Dc11 · Published 2022-06-13 · Updated 2022-06-21 · CVE-2022-1777

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Filr WordPress plugin versions prior to 1.2.2.1

Description The issue concerns a lack of authorization checks in two AJAX actions within the Filr WordPress plugin. These actions can be called by any authenticated user, including those with minimal permissions like subscribers. Although the actions are protected by a nonce, this nonce is leaked on the dashboard, potentially allowing attackers to upload arbitrary HTML files or delete files, either all of them or specific ones.

Recommendations For versions prior to 1.2.2.1, update to version 1.2.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the dashboard to prevent the nonce leak, or disable the two vulnerable AJAX actions until a patch is applied.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-1777

Affected Products

Filr

References · 4

• 🔥 https://wpscan.com/vulnerability/a50dc7f8-a9e6-41fa-a047-ad1c3bc309b4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-1777 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1777 · Vendor Advisory
• https://t.me/cibsecurity/44276 · Telegram Post