PT-2024-38804 · WordPress · Wp Extended

Marco Wotschka · Published 2024-09-04 · Updated 2024-09-05 · CVE-2024-8104

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: WP Extended plugin for WordPress versions up to, and including, 3.0.8

Description: The issue allows authenticated attackers, with subscriber access and above, to read the contents of arbitrary files on the server, which can contain sensitive information, via the download file ajax function. This enables potential exposure of sensitive data on the server.

Recommendations: For WP Extended plugin for WordPress versions up to, and including, 3.0.8, update to version 3.0.9 to secure your site. As a temporary workaround, consider disabling the download file ajax function until a patch is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-8104

Affected Products

Wp Extended

References · 12

• https://osv.dev/vulnerability/CVE-2024-8104 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8104 · Security Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3145430%40wpextended%2Ftrunk&old=3134345%40wpextended%2Ftrunk&sfp_email=&sfph_mail= · Patch
• https://t.me/cvedetector/4775 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1831280654371148225 · Twitter Post
• https://t.me/cvenotify/93160 · Telegram Post
• https://t.me/cvenotify/93329 · Telegram Post
• https://twitter.com/AegisLens/status/1831286916991287397 · Twitter Post
• https://plugins.trac.wordpress.org/browser/wpextended/trunk/includes/libraries/wpext_export/wpext_export.php#L137 · Note
• https://twitter.com/AegisLens/status/1831712661538566424 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/0fad1834-0ee1-4542-a5a7-55a32861c81d?source=cve · Note
• https://twitter.com/CveFindCom/status/1831226019505742168 · Twitter Post