PT-2022-9536 · WordPress · Error Log Viewer

Ceylan Bozogullarindan · Published 2022-03-14 · Updated 2022-03-20 · CVE-2021-24966

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Error Log Viewer WordPress plugin versions prior to 1.1.2

Description The issue allows high privilege users to clear arbitrary files on the web server, including those outside of the blog folder, due to a lack of validation of the log file path to clear.

Recommendations For Error Log Viewer WordPress plugin versions prior to 1.1.2, update to version 1.1.2 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2021-24966

Affected Products

Error Log Viewer

References · 4

• 🔥 https://exploit-db.com/exploits/50746 · Exploit
• 🔥 https://wpscan.com/vulnerability/166a4f88-4f0c-4bf4-b624-5e6a02e21fa0 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24966 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24966 · Vendor Advisory