PT-2023-6275 · Unknown · Reciply Plugin

Published 2023-10-15 · Updated 2024-05-17 · CVE-2011-10004

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions reciply Plugin versions 1.1.7 and earlier

Description A critical issue affects the processing of the file uploadImage.php, leading to unrestricted upload. The attack may be initiated remotely, potentially allowing an attacker to execute arbitrary code.

Recommendations For reciply Plugin versions 1.1.7 and earlier, upgrade to version 1.1.8 to address this issue. As a temporary workaround, consider restricting access to the uploadImage.php file until the upgrade is applied.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2023-06985

CVE-2011-10004

Affected Products

Reciply Plugin

References · 8

• https://github.com/wp-plugins/reciply/commit/e3ff616dc08d3aadff9253f1085e13f677d0c676 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-10004 · Security Note
• https://bdu.fstec.ru/vul/2023-06985 · Security Note
• https://vuldb.com/?ctiid.242189 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-10004 · Note
• https://t.me/cvenotify/59563 · Telegram Post
• https://t.me/cibsecurity/72396 · Telegram Post
• https://vuldb.com/?id.242189 · Note