PT-2024-21587 · WordPress · Betheme
Francesco Carlucci
·
Published
2024-08-29
·
Updated
2024-09-03
·
CVE-2024-2694
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Betheme theme for WordPress versions up to, and including, 27.5.6
Description
The issue is related to PHP Object Injection via deserialization of untrusted input of the
mfn-page-items post meta value. This allows authenticated attackers with contributor-level access and above to inject a PHP Object. No known POP chain is present in the vulnerable plugin, but if a POP chain is present via an additional plugin or theme, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.Recommendations
For Betheme theme for WordPress versions up to, and including, 27.5.6, update to a version higher than 27.5.6 to resolve the issue. As a temporary workaround, consider restricting access to the
mfn-page-items post meta value to minimize the risk of exploitation. Additionally, restrict contributor-level access and above to reduce the potential attack surface.Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Betheme