PT-2024-18445 · WordPress · The Logo Showcase Ultimate

Francesco Carlucci · Published 2024-03-13 · Updated 2024-03-13 · CVE-2024-1951

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid plugin for WordPress versions up to, and including, 1.3.8

Description The issue allows authenticated attackers with contributor access and above to inject a PHP Object via deserialization of untrusted input through a shortcode. This could potentially lead to the deletion of arbitrary files, retrieval of sensitive data, or execution of code if a POP chain is present, either via an additional plugin or theme installed on the target system.

Recommendations For versions up to, and including, 1.3.8, update to a version that fixes the PHP Object Injection issue to prevent exploitation. As a temporary workaround, consider restricting contributor access and above to minimize the risk of exploitation until a patch is available. Avoid using shortcodes with untrusted input in the affected plugin until the issue is resolved.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-1951

Affected Products

The Logo Showcase Ultimate

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-1951 · Security Note
• https://plugins.trac.wordpress.org/browser/logo-showcase-ultimate/tags/1.3.8/classes/lcg-shortcode.php · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/a63b2091-1502-4d9f-98c4-ce9d2f923dc4?source=cve · Note
• https://plugins.trac.wordpress.org/changeset?old_path=/logo-showcase-ultimate/tags/1.3.8&old=3045923&new_path=/logo-showcase-ultimate/tags/1.3.9&new=3045923&sfp_email=&sfph_mail= · Note
• https://twitter.com/CVEnew/status/1767938580264198290 · Twitter Post
• https://plugins.trac.wordpress.org/browser/logo-showcase-ultimate/tags/1.3.8/classes/lcg-adl-metabox.php · Note