PT-2022-9561 · WordPress · Seur Oficial

José Aguilera · Published 2022-02-07 · Updated 2022-02-11 · CVE-2021-25004

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SEUR Oficial WordPress plugin versions prior to 1.7.2

Description The issue allows downloading any file from the web server without restriction after knowing the URL and a password that an administrator can see in the plugin settings page. This is possible because the plugin creates a PHP file with a random name when installed, which is used for support purposes.

Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin settings page to minimize the risk of exploitation. Avoid using the password visible in the plugin settings page for any other purpose until the issue is resolved.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2021-25004

Affected Products

Seur Oficial

References · 5

• 🔥 https://wpscan.com/vulnerability/cfbc2b43-b8f8-4bcb-a3d3-39d217afa530 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-25004 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25004 · Vendor Advisory
• https://t.me/cvenotify/26678 · Telegram Post
• https://t.me/cibsecurity/36954 · Telegram Post