PT-2025-6602 · WordPress · Keap Official Opt-In Forms
Hiroho Shimada
·
Published
2025-02-18
·
Updated
2025-03-03
·
CVE-2024-13725
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Keap Official Opt-in Forms plugin for WordPress versions up to, and including, 2.0.1
Description
The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the
service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. If register argc argv is enabled on the server and pearcmd.php is installed, this issue might lead to Remote Code Execution.Recommendations
For versions up to, and including, 2.0.1, update to a version higher than 2.0.1 to resolve the issue.
As a temporary workaround, consider disabling the
service parameter until a patch is available.
Restrict access to the pearcmd.php file to minimize the risk of exploitation if register argc argv is enabled on the server.Fix
RCE
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Keap Official Opt-In Forms