PT-2024-28556 · WordPress · Ppom Pro+1

Andrea Bocchetti · Published 2024-04-26 · Updated 2024-04-26 · CVE-2024-3962

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Product Addons & Fields for WooCommerce plugin for WordPress versions up to, and including, 32.0.18

Description The issue is related to missing file type validation in the ppom upload file function, allowing unauthenticated attackers to upload arbitrary files on the affected site's server. This could potentially lead to remote code execution. Successful exploitation requires the PPOM Pro plugin to be installed along with a WooCommerce product that contains a file upload field to retrieve the correct nonce.

Recommendations For versions up to, and including, 32.0.18, consider disabling the ppom upload file function until a patch is available to prevent arbitrary file uploads. Restrict access to the file upload field in WooCommerce products to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2024-3962

Affected Products

Ppom Pro

Product Addons & Fields For Woocommerce

References · 6

• https://osv.dev/vulnerability/CVE-2024-3962 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-3962 · Security Note
• https://plugins.trac.wordpress.org/changeset/3075669/woocommerce-product-addon · Patch
• https://twitter.com/VulmonFeeds/status/1783810521336057883 · Twitter Post
• https://themeisle.com/plugins/ppom-pro · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/4f95bcc3-354e-4016-9a17-945569b076b6?source=cve · Note