CVE-2024-51793 — AI Deep Analysis Summary

🚨 **Essence**: Critical Arbitrary File Upload in WordPress plugin 'Computer Repair Shop'. 💥 **Consequences**: Attackers upload malicious files (e.g., Webshells) → Remote Code Execution (RCE) → Full Server Compromise.…

🔍 **Root Cause**: CWE-434: Unrestricted Upload of File with Dangerous Type. ⚠️ **Flaw**: Missing file type validation in the upload mechanism. No checks on what files are accepted.

📦 **Affected Product**: RepairBuddy (Computer Repair Shop) WordPress Plugin. 👤 **Vendor**: Ateeq Rafeeq (Webful Creations). 📉 **Versions**: All versions **≤ 3.8115**.

🕵️ **Attacker Actions**: Upload PHP Webshells or arbitrary scripts. 🔓 **Privileges**: Unauthenticated access (No login needed). 💾 **Data Impact**: Full RCE.…

📉 **Threshold**: **VERY LOW**. 🔑 **Auth**: None required (Unauthenticated). ⚙️ **Config**: Exploitable via standard `admin-ajax.php` endpoint. Easy to trigger.

🔥 **Public Exploits**: **YES**. 📂 **PoCs**: Multiple GitHub repos exist (e.g., Nxploited, KTN1990, 0axz-tools, JoshuaProvoste). 💣 **Status**: 0-click RCE exploits available. Wild exploitation risk is HIGH.

🔎 **Self-Check**: Scan for 'Computer Repair Shop' or 'RepairBuddy' plugin. 📊 **Version Check**: Verify installed version is **< 3.8116**. 🛠️ **Tools**: Use WPScan or manual directory listing to detect plugin presence.

🛡️ **Official Fix**: **YES**. 📝 **Patch**: Update plugin to version **3.8116** or later. ✅ **Action**: Immediate upgrade recommended by vendor/security advisories.

🚧 **No Patch Workaround**: 1. **Disable Plugin**: Deactivate 'Computer Repair Shop' immediately. 2. **WAF Rules**: Block uploads to `admin-ajax.php` with PHP extensions. 3.…

🔴 **Urgency**: **CRITICAL / IMMEDIATE**. ⏱️ **Priority**: P1. 💡 **Reason**: Unauthenticated RCE + Public Exploits = Active Threat. Patch NOW or disable plugin.