PT-2024-15861 · WordPress · Popup More Popups
0X9567B
·
Published
2024-01-27
·
Updated
2024-02-08
·
CVE-2024-0844
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
The Popup More Popups, Lightboxes, and more popup modules plugin for WordPress version 2.1.6
Description
The issue allows authenticated attackers with administrator-level access and above to include and execute arbitrary files ending with "Form.php" on the server via the
ycfChangeElementData() function. This enables the execution of any PHP code in those files, which can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.Recommendations
For version 2.1.6, consider disabling the
ycfChangeElementData() function until a patch is available to prevent the inclusion and execution of arbitrary files. Restrict access to files ending with "Form.php" to minimize the risk of exploitation. Avoid uploading files that could be used to execute PHP code, especially in cases where "safe" file types are allowed. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Popup More Popups