PT-2024-16560 · WordPress · Wordpress User Extra Fields

Tonn · Published 2024-11-09 · Updated 2026-04-08 · CVE-2024-10801

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WordPress User Extra Fields plugin versions up to and including 16.5

Description The WordPress User Extra Fields plugin is vulnerable to arbitrary file uploads due to missing file type validation in the ajax manage file chunk upload() function. This allows unauthenticated attackers to upload arbitrary files on the affected site's server, potentially leading to remote code execution. User registration must be enabled for this vulnerability to be exploited.

Recommendations For WordPress User Extra Fields plugin versions up to and including 16.5, update to a version later than 16.5 to resolve the issue. As a temporary workaround, consider disabling the ajax manage file chunk upload() function until a patch is available. Additionally, restrict user registration to minimize the risk of exploitation.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-10801

Affected Products

Wordpress User Extra Fields

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-10801 · Security Note
• https://t.me/latest_high_impact_cve/1476 · Telegram Post
• https://t.me/cvedetector/10283 · Telegram Post
• https://twitter.com/0dayPublishing/status/2041937639767449788 · Twitter Post
• https://twitter.com/cracbot/status/1856940194043507151 · Twitter Post
• https://twitter.com/CVEnew/status/1855156237538677068 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/6a60e2c3-4597-4b21-ad20-6a00e483fcf1?source=cve · Note
• https://twitter.com/CveFindCom/status/1855158743509479633 · Twitter Post
• https://twitter.com/transilienceai/status/1856567913563500946 · Twitter Post
• https://codecanyon.net/item/user-extra-fields/12949844 · Note