PT-2024-28820 · WordPress · Wp Photo Album Plus

Matthew Rollings + 1 · Published 2024-05-24 · Updated 2024-05-24 · CVE-2024-4037

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WP Photo Album Plus versions up to, and including, 8.7.02.003

Description The issue allows unauthenticated users to execute an action that does not properly validate a value before running do shortcode, making it possible for unauthenticated attackers to execute arbitrary shortcodes. This is due to the plugin not properly validating a value before executing the do shortcode function.

Recommendations For versions up to, and including, 8.7.02.003, update to a version later than 8.7.02.003 to resolve the issue. As a temporary workaround, consider restricting access to the plugin's shortcode execution functionality until a patch is available.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-4037

Affected Products

Wp Photo Album Plus

References · 7

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3079831%40wp-photo-album-plus&new=3079831%40wp-photo-album-plus&sfp_email=&sfph_mail= · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-4037 · Security Note
• https://osv.dev/vulnerability/CVE-2024-4037 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3078746%40wp-photo-album-plus&new=3078746%40wp-photo-album-plus&sfp_email=&sfph_mail=#file3 · Patch
• https://wordfence.com/threat-intel/vulnerabilities/id/3d6b95ee-0a0d-49f7-83b1-4716eec3b863?source=cve · Note
• https://plugins.trac.wordpress.org/browser/wp-photo-album-plus/trunk/wppa-ajax.php#L1138 · Note
• https://t.me/cvenotify/80958 · Telegram Post