PT-2024-37102 · WordPress · Timeline Event History Plugin
Francesco Carlucci
·
Published
2024-07-18
·
Updated
2024-07-18
·
CVE-2024-5726
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Timeline Event History plugin for WordPress versions up to, and including, 3.1
Description:
The issue allows authenticated attackers with Contributor-level access and above to inject a PHP Object via deserialization of untrusted input
timelines-data parameter. This could potentially lead to the deletion of arbitrary files, retrieval of sensitive data, or execution of code if a POP chain is present via an additional plugin or theme installed on the target system.Recommendations:
For Timeline Event History plugin for WordPress versions up to, and including, 3.1, consider disabling the deserialization of the
timelines-data parameter until a patch is available. Restrict access to the plugin to minimize the risk of exploitation. Avoid using the timelines-data parameter in the affected plugin until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Timeline Event History Plugin