WordPress File Upload Plugin Unauthenticated Path Traversal (CVE-2024-9047) Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: WordPress File Upload <= 4.24.11 - Unauthenticated Path Traversal to Arbitrary File Read and Deletion in wfu_file_downloader.php 2. Vulnerability Description: - Describes an unauthenticated path traversal vulnerability in the WordPress File Upload plugin across all versions (including 4.24.11), allowing attackers to read or delete files outside the original directory. - Successful exploitation requires the target WordPress installation to be running PHP 7.4 or earlier. 3. Vulnerability Rating: - CVSS Score: 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS Score: 9.8 (Critical) 4. Public Release Date: October 11, 2024 5. Update Date: October 12, 2024 6. Researcher: Arkadiusz Hydzik 7. Fix Status: - Fixed - Latest patched version: 4.24.12 8. Affected Versions: - <= 4.24.11 9. Vulnerability Type: Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) 10. CVE ID: CVE-2024-9047 11. Reference Link: plugins.trac.wordpress.org 12. Vulnerability Details: - Describes the path traversal vulnerability in the WordPress File Upload plugin and how it can be exploited. - Provides remediation advice: update to version 4.24.12 or higher. 13. Copyright and Licensing Information: - Copyright and licensing information for Defiant Inc. and MITRE Corporation. 14. Vulnerability Database: - Wordfence Intelligence’s WordPress vulnerability database is free and accessible via API. 15. Additional Information: - Information about Wordfence’s free and paid products, and how to obtain free API access and Webhook integration from Wordfence. This information helps users understand the path traversal vulnerability in the WordPress File Upload plugin, as well as how to remediate and potentially exploit it.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress File Upload Plugin Unauthenticated Path Traversal (CVE-2024-9047) Advisory

More from this source