PT-2024-17534 · WordPress · Ar

Cc · Published 2024-12-13 · Updated 2024-12-13 · CVE-2024-12300

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions AR for WordPress plugin for WordPress versions up to, and including, 7.3

Description The issue is related to unauthorized double extension file upload due to a missing capability check on the set ar featured image() function. This allows unauthenticated attackers to upload php files leveraging a double extension attack. However, the file is deleted immediately, and double extension attacks only work on select servers, making successful exploitation unlikely.

Recommendations For versions up to, and including, 7.3, consider disabling the set ar featured image() function until a patch is available to prevent unauthorized file uploads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-12300

Affected Products

Ar

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-12300 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/8b507369-49f7-4a1d-900b-c7bef40aec96?source=cve · Note
• https://t.me/cvenotify/104129 · Telegram Post
• https://t.me/cvedetector/12819 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3206666%40ar-for-wordpress%2Ftrunk&old=3205240%40ar-for-wordpress%2Ftrunk&sfp_email=&sfph_mail= · Note
• https://twitter.com/CVEnew/status/1867537629010395488 · Twitter Post
• https://plugins.trac.wordpress.org/browser/ar-for-wordpress/trunk/includes/ar-add-media.php?rev=3177638 · Note
• https://twitter.com/VulmonFeeds/status/1867510957187952752 · Twitter Post