PT-2023-27942 · WordPress · Wp Ultimate Csv Importer

István Márton + 1 · Published 2023-08-04 · Updated 2023-08-08 · CVE-2023-4142

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP Ultimate CSV Importer plugin for WordPress versions up to, and including, 7.9.8

Description The issue allows authenticated attackers with author-level permissions or above to execute code on the server via the ->cus1 parameter, if the administrator previously grants access in the plugin settings. This can be exploited by attackers with sufficient permissions, potentially leading to remote code execution. The author has resolved this issue by removing the ability for authors and editors to import files, but note that remote code execution is still possible for site administrators.

Recommendations For versions up to, and including, 7.9.8, consider removing the ability for authors and editors to import files to mitigate the risk of exploitation, as done by the author. Additionally, use the plugin with caution, especially for site administrators, as they can still execute code on the server.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2023-4142

Affected Products

Wp Ultimate Csv Importer

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-4142 · Security Note
• https://plugins.trac.wordpress.org/changeset/2944635/wp-ultimate-csv-importer/trunk/wp-ultimate-csv-importer.php · Patch
• https://osv.dev/vulnerability/CVE-2023-4142 · Vendor Advisory
• https://t.me/cibsecurity/67738 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/db1bad2e-55df-40c5-9a3f-651858a19b42?source=cve · Note
• https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.9.6/importExtensions/ImportHelpers.php#L205 · Note