PT-2023-15995 · WordPress · Customer Reviews For Woocommerce

Lana Codes · Published 2023-02-13 · Updated 2023-02-21 · CVE-2023-0080

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Customer Reviews for WooCommerce WordPress plugin versions prior to 5.16.0

Description The issue allows users with a contributor role and above to include arbitrary files via a traversal attack due to a lack of validation in one of its shortcode attributes. This could enable them to read non-PHP files and retrieve their content. Remote Code Execution (RCE) could also be achieved if an attacker manages to upload a malicious image containing PHP code and then includes it via the affected attribute. On a default WordPress install, authors could easily achieve this given that they have the upload file capability.

Recommendations For versions prior to 5.16.0, update to version 5.16.0 or later to resolve the issue. As a temporary workaround, consider restricting the upload file capability for authors and contributors to minimize the risk of exploitation. Additionally, restrict access to the vulnerable shortcode attribute to prevent arbitrary file inclusion.

Exploit

Fix

Related Identifiers

CVE-2023-0080

Affected Products

Customer Reviews For Woocommerce

References · 4

• 🔥 https://wpscan.com/vulnerability/6b0d63ed-e244-4f20-8f10-a6e0c7ccadd4 · Exploit
• https://osv.dev/vulnerability/CVE-2023-0080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0080 · Security Note
• https://t.me/cvenotify/44230 · Telegram Post