PT-2023-4778 · WordPress · Forminator

Mehmet · Published 2023-07-20 · Updated 2023-09-06 · CVE-2023-4596

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Forminator plugin for WordPress versions up to, and including, 1.24.6

Description The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload post image() function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server, which may make remote code execution possible. The vulnerability affects over 400,000 sites.

Recommendations For Forminator plugin for WordPress versions up to, and including, 1.24.6: Update to a version later than 1.24.6 to resolve the issue. As a temporary workaround, consider disabling the upload post image() function until a patch is available. Restrict access to the upload functionality to minimize the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2023-05225

CVE-2023-4596

Affected Products

Forminator

References · 18

• 🔥 https://github.com/E1A/CVE-2023-4596 · Exploit
• 🔥 https://exploit-db.com/exploits/51664 · Exploit
• https://bdu.fstec.ru/vul/2023-05225 · Security Note
• https://plugins.trac.wordpress.org/changeset/2954409/forminator/trunk/library/fields/postdata.php · Patch
• https://osv.dev/vulnerability/CVE-2023-4596 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4596 · Security Note
• https://twitter.com/zoomeye_team/status/1699355343279845826 · Twitter Post
• https://twitter.com/CVEnew/status/1696709502798590415 · Twitter Post
• https://t.me/pentestingnews/38935 · Telegram Post
• https://t.me/netlas/89 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/9cd87da6-1f4c-4a15-8ebb-6e0f8ef72513?source=cve · Note
• https://twitter.com/the_yellow_fall/status/1696721138015973544 · Twitter Post
• https://twitter.com/Netlas_io/status/1698659674089050271 · Twitter Post
• https://twitter.com/7hreathunter/status/1698580638754816340 · Twitter Post
• https://twitter.com/TodayCyberNews/status/1698660901845700942 · Twitter Post