PT-2024-16012 · WordPress · Wp Easy Post Types

István Márton

·

Published

2024-10-18

·

Updated

2024-10-22

·

CVE-2024-10079

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions WP Easy Post Types plugin for WordPress versions up to, and including, 1.4.4
Description The issue concerns PHP Object Injection via deserialization of untrusted input from the text parameter in the ajax import content function. This allows authenticated attackers, with subscriber-level permissions and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. However, if a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Recommendations For WP Easy Post Types plugin for WordPress versions up to, and including, 1.4.4, consider disabling the ajax import content function until a patch is available to prevent exploitation. Restrict access to the text parameter in the affected function to minimize the risk of PHP Object Injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-10079

Affected Products

Wp Easy Post Types