PT-2024-23469 · WordPress · Wpvivid Backup & Migration Plugin

Maksim Kosenko · Published 2024-04-12 · Updated 2024-04-12 · CVE-2024-3054

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WPvivid Backup & Migration Plugin for WordPress versions up to, and including, 0.9.99

Description The issue arises from insufficient path validation on the tree node[node][id] parameter, allowing authenticated attackers with admin-level access and above to deserialize untrusted input at the "wpvividstg get custom exclude path free" action. This could enable attackers to call files using a PHAR wrapper, potentially leading to the deserialization of data and the calling of arbitrary PHP Objects. If a POP chain is present via an additional plugin or theme, it could facilitate the deletion of arbitrary files, retrieval of sensitive data, or execution of code.

Recommendations For WPvivid Backup & Migration Plugin for WordPress versions up to, and including, 0.9.99, consider disabling the wpvividstg get custom exclude path free action until a patch is available. Restrict access to the tree node[node][id] parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-3054

Affected Products

Wpvivid Backup & Migration Plugin

References · 5

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3067224%40wpvivid-backuprestore&new=3067224%40wpvivid-backuprestore&sfp_email=&sfph_mail= · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-3054 · Security Note
• https://osv.dev/vulnerability/CVE-2024-3054 · Vendor Advisory
• https://wordfence.com/threat-intel/vulnerabilities/id/bf26fc68-9fd4-4e4e-b34f-c947d95891f9?source=cve · Note
• https://t.me/cvenotify/76542 · Telegram Post