This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: Arbitrary File Upload via missing validation in `upload-handler.php`.โฆ
๐ข **Vendor**: AIT Themes. <br>๐ฆ **Product**: AIT CSV import/export. <br>๐ **Affected Versions**: **3.0.3 and earlier**. <br>๐ **Platform**: WordPress sites using this specific plugin.
Q4What can hackers do? (Privileges/Data)
๐ **Privileges**: **Full System Control**. <br>๐ **Data**: Complete access to server files, database, and user data. <br>โก **Impact**: High (CVSS 9.8).โฆ
๐ **Threshold**: **LOW**. <br>๐ **Auth**: No authentication required (`PR:N`). <br>๐ฑ๏ธ **UI**: No user interaction needed (`UI:N`). <br>๐ **Access**: Network accessible (`AV:N`). Easy to exploit remotely.
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ฃ **Exploit Status**: **YES**. <br>๐ **Evidence**: Public Metasploit module exists (`wp_ait_csv_rce.rb`). <br>๐ข **Advisories**: Confirmed by Acunetix, WordFence, and WPScan. Wild exploitation is highly likely.
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: <br>1. Scan for `AIT CSV import/export` plugin. <br>2. Verify version is **โค 3.0.3**. <br>3. Check for `upload-handler.php` in the plugin directory. <br>4.โฆ
๐ซ **No Patch Workaround**: <br>1. **Disable/Uninstall** the plugin if not needed. <br>2. **Restrict File Uploads**: Use WAF rules to block PHP uploads in the upload directory. <br>3.โฆ