This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: A critical code flaw in the WordPress plugin **Simple-File-List**. ๐ **Consequences**: Attackers can rename uploaded PHP files from `.png` to `.php`, leading to **Remote Code Execution (RCE)**.โฆ
๐ก๏ธ **Root Cause**: **CWE-434** (Arbitrary Upload). ๐ **Flaw**: The `rename` function is misused. It allows changing the extension of uploaded files, bypassing security checks.โฆ
๐ฅ **Affected**: Users of **Simple File List** plugin. ๐ฆ **Version**: **4.2.2** and earlier. ๐ข **Vendor**: eemitch. โ ๏ธ If you use this plugin, you are at risk.
Q4What can hackers do? (Privileges/Data)
๐ต๏ธ **Hackers Can**: Execute arbitrary PHP code on the server. ๐ **Privileges**: Full control over the web server. ๐ **Data**: Access, modify, or delete any data. ๐ The entire WordPress site can be taken over.
Q5Is exploitation threshold high? (Auth/Config)
๐ **Threshold**: **LOW**. ๐ซ **Auth**: No authentication required (PR:N). ๐ฑ๏ธ **UI**: No user interaction needed (UI:N). ๐ **Network**: Remote access (AV:N). ๐ Extremely easy to exploit.
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ฅ **Public Exp?**: **YES**. ๐ **PoC Available**: Multiple Proof-of-Concept scripts exist on GitHub (e.g., `137f/PoC-CVE-2020-36847`). ๐ ๏ธ Ready-to-use exploits are circulating. โ ๏ธ High risk of automated attacks.
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: Scan for **Simple File List** plugin. ๐ **Version Check**: Is version โค 4.2.2? ๐ค **Upload Test**: Try uploading a PHP file disguised as a PNG. ๐ฉ If it renames to `.php`, you are vulnerable.
Q8Is it fixed officially? (Patch/Mitigation)
๐ง **Fixed?**: **YES**. ๐ฅ **Patch**: Update the plugin to the latest version. ๐ **Reference**: WordPress Trac changeset `2286920`. ๐ Immediate update is the primary fix.
Q9What if no patch? (Workaround)
๐ง **No Patch?**: Disable the plugin immediately. ๐ซ **Remove**: Uninstall if not needed. ๐ก๏ธ **WAF**: Use a Web Application Firewall to block PHP uploads. ๐ **Restrict**: Block `.php` execution in upload directories.