PT-2024-16571 · WordPress · Code Embed

B0Lli + 1 · Published 2024-11-08 · Updated 2024-11-13 · CVE-2024-10814

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Code Embed plugin for WordPress versions up to 2.5

Description The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery via the ce get file() function. This makes it possible for authenticated attackers, with contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Recommendations For Code Embed plugin for WordPress versions up to 2.5, update to the latest version to mitigate the risk of Server-Side Request Forgery. As a temporary workaround, consider restricting access to the ce get file() function until a patch is available.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-10814

Affected Products

Code Embed

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2024-10814 · Security Note
• https://twitter.com/transilienceai/status/1855298313245151676 · Twitter Post
• https://plugins.trac.wordpress.org/browser/simple-embed-code/trunk/includes/add-embeds.php#L145 · Note
• https://twitter.com/transilienceai/status/1855298321688228165 · Twitter Post
• https://twitter.com/transilienceai/status/1855298306550923580 · Twitter Post
• https://twitter.com/transilienceai/status/1856567978109636856 · Twitter Post
• https://twitter.com/transilienceai/status/1856567965396713704 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/0e1e17c9-b9ee-495a-be49-9aa88f8023a2?source=cve · Note
• https://twitter.com/transilienceai/status/1856023356317061358 · Twitter Post
• https://plugins.trac.wordpress.org/changeset/3182609 · Note
• https://twitter.com/transilienceai/status/1856567958325129407 · Twitter Post
• https://t.me/cvenotify/101180 · Telegram Post
• https://twitter.com/CVEnew/status/1855108345780191322 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1855146633433948550 · Twitter Post
• https://twitter.com/transilienceai/status/1856023349526442405 · Twitter Post