PT-2022-3361 · Weblizar · School Management Wordpress Plugin

Harald Eilertsen

·

Published

2022-05-04

·

Updated

2024-01-22

·

CVE-2022-1609

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions School Management WordPress plugin versions prior to 9.9.7
Description The issue is related to an obfuscated backdoor injected in the license checking code of the School Management WordPress plugin, which registers a REST API handler. This allows an unauthenticated attacker to execute arbitrary PHP code on the site, potentially leading to full control over the application. The estimated number of potentially affected devices worldwide is over 340,000, as the plugin's creator, Weblizar, claims to have more than 340,000 clients using its premium and free WordPress themes and plugins. The vulnerability was discovered in the premium versions of the plugin prior to 9.9.7 and is considered highly severe.
Recommendations For School Management WordPress plugin versions prior to 9.9.7, update the plugin to version 9.9.7 or later to prevent exploitation. As a temporary workaround, consider disabling the REST API handler registered by the plugin's license checking code until a patch is available. Restrict access to the plugin's license checking functionality to minimize the risk of exploitation.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-506CWE-94

Related Identifiers

BDU:2022-04122
CVE-2022-1609

Affected Products

School Management Wordpress Plugin