PT-2024-18124 · WordPress · File Manager
0Xbishop
+1
·
Published
2024-03-21
·
Updated
2025-05-19
·
CVE-2024-1538
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
File Manager plugin for WordPress versions up to, and including, 7.2.4
Description
The issue is due to missing or incorrect nonce validation on the wp file manager page that includes files through the
lang parameter. This makes it possible for unauthenticated attackers to include local JavaScript files that can be leveraged to achieve remote code execution (RCE) via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link. Over 1 million sites are potentially exposed to this risk.Recommendations
For versions up to, and including, 7.2.4, update to version 7.2.5 to fully patch the issue.
As a temporary workaround, consider restricting access to the wp file manager page and avoiding the use of the
lang parameter until the issue is resolved.Fix
RCE
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
File Manager