PT-2024-31670 · Yotuwp · The Video Gallery – Youtube Playlist

Foxyyy + 1 · Published 2024-06-15 · Updated 2024-09-20 · CVE-2024-4551

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: The Video Gallery – YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress versions up to, and including, 1.3.13

Description: The issue allows authenticated attackers with contributor access or higher to include and execute arbitrary PHP files on the server via the display function. This enables the execution of any PHP code in those files, potentially bypassing access controls, obtaining sensitive data, or achieving code execution, especially in scenarios where images and other "safe" file types can be uploaded and included.

Recommendations: For versions up to, and including, 1.3.13, update to a version higher than 1.3.13 to resolve the issue. As a temporary workaround, consider restricting access to the display function to minimize the risk of exploitation. Additionally, restrict the ability to upload and include PHP files to prevent code execution.

Exploit

Fix

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2024-4551

Affected Products

The Video Gallery – Youtube Playlist

References · 7

• 🔥 https://swisskyrepo.github.io/PayloadsAllTheThings/File%20Inclusion/#lfi-to-rce-via-php-pearcmd · Exploit
• https://osv.dev/vulnerability/CVE-2024-4551 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-4551 · Security Note
• https://plugins.trac.wordpress.org/browser/yotuwp-easy-youtube-embed/trunk/inc/views.php#L828 · Patch
• https://t.me/cvenotify/95379 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3106918%40yotuwp-easy-youtube-embed&new=3106918%40yotuwp-easy-youtube-embed&sfp_email=&sfph_mail= · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/a4c7c932-5955-4fce-a64d-3b5c5de95356?source=cve · Note