PT-2023-14111 · WordPress · Welcart E-Commerce

Published 2023-01-02 · Updated 2025-04-10 · CVE-2022-4237

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Welcart e-Commerce WordPress plugin versions prior to 2.8.6

Description The issue arises from the lack of validation of user input before using it in file exist() functions via various AJAX actions available to any authenticated users. This could allow users with a role as low as subscriber to perform PHAR deserialisation when they can upload a file and a suitable gadget chain is present on the blog.

Recommendations For versions prior to 2.8.6, update to version 2.8.6 or later to resolve the issue. As a temporary workaround, consider restricting access to AJAX actions and file upload capabilities to higher-role users until the update is applied. Additionally, ensure that no suitable gadget chain is present on the blog to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2022-4237

Affected Products

Welcart E-Commerce

References · 6

• 🔥 https://wpscan.com/vulnerability/7a4b790c-49ae-46bc-9544-e188deae243f · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-4237 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4237 · Vendor Advisory
• https://t.me/cibsecurity/55747 · Telegram Post
• https://t.me/cvenotify/118736 · Telegram Post
• https://t.me/cvenotify/41132 · Telegram Post