The AdSanity plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'ajax_upload' function in versions up to, and including, 1.8.1. This makes it possible for authenticated attackers with Contributor+ level privileges to upload arbitrary files on the affected sites server which makes remote code execution possible.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2023/11/09/3 | Mailing List |
http://xenbits.xen.org/xsa/advisory-443.html | Patch Third Party Advisory |
https://blog.nintechnet.com/critical-vulnerability-in-wordpress-adsanity-plugin/ | Exploit |
https://www.wordfence.com/threat-intel/vulnerabilities/id/effd72d2-876d-4f8d-b1e4-5ab38eab401b?source=cve | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Wordfence
Published: 2023-06-07T01:51:50.838Z
Updated: 2023-06-07T01:51:50.838Z
Reserved: 2023-06-06T13:38:43.158Z
Link: CVE-2022-4949
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-06-07T02:15:15.750
Modified: 2024-01-12T22:07:14.007
Link: CVE-2022-4949
JSON object: View
Redhat Information
No data.
CWE