WordPress Plugin advanced-responsive-video-embedder Arbitrary Code Execution

Vulnerability Overview Vulnerability Name: advanced-responsive-video-embedder Vulnerability Description: This vulnerability affects the WordPress plugin , version 10.8.7. The flaw allows attackers to execute arbitrary code by modifying plugin files, potentially leading to complete compromise of the website. Scope of Impact Affected Versions: 10.8.7 Affected Platform: WordPress Affected Users: WordPress site administrators using this plugin Remediation Fixed Version: 10.8.7 Remediation Measures: The plugin developer has released version 10.8.7, which fixes this vulnerability. Users are advised to update to the latest version immediately. POC Code ```php array('class' => true), 'h2' => array('class' => true), 'h3' => array('class' => true), 'h4' => array('class' => true), 'h5' => array('class' => true), 'h6' => array('class' => true), 'a' => array(), 'br' => true, 'target' => true, 'title' => true, 'abbr' => array('title' => true), 'small' => array(), 'b' => array('class' => true), 'i' => array(), 'u' => array(), 'strong' => array(), 'code' => array('class' => true), 'ul' => array('class' => true), 'ol' => array('class' => true), 'li' => array('class' => true), 'div' => array('class' => true), 'span' => array('class' => true), 'img' => array('src' => true, 'alt' => true, 'title' => true, 'width' => true, 'height' => true), 'table' => array('class' => true), 'tr' => array('class' => true), 'td' => array('class' => true), 'th' => array('class' => true), 'caption' => array('class' => true), 'thead' => array('class' => true), 'tbody' => array('class' => true), 'tfoot' => array('class' => true), 'pre' => array('class' => true), 'blockquote' => array('class' => true), 'cite' => array('class' => true), 'q' => array('class' => true), 'dfn' => array('class' => true), 'address' => array('class' => true), 'hr' => array('class' => true), 'mark' => array('class' => true), 'ins' => array('class' => true), 'del' => array('class' => true), 'sub' => array('class' => true), 'sup' => array('class' => true), 'var' => array('class' => true), 'samp' => array('class' => true), 'kbd' => array('class' => true), 'time' => array('class' => true), 'data' => array('class' => true), 'details' => array('class' => true), 'summary' => array('class' => true), 'figure' => array('class' => true), 'figcaption' => array('class' => true), 'picture' => array('class' => true), 'source' => array('class' => true), 'video' => array('class' => true), 'audio' => array('class' => true), 'track' => array('class' => true), 'embed' => array('class' => true), 'object' => array('class' => true), 'param' => array('class' => true), 'map' => array('class' => true), 'area' => array('class' => true), 'svg' => array('class' => true), 'path' => array('class' => true), 'circle' => array('class' => true), 'ellipse' => array('class' => true), 'line' => array('class' => true), 'polyline' => array('class' => true), 'polygon' => array('class' => true), 'rect' => array('class' => true), 'text' => array('class' => true), 'textPath' => array('class' => true), 'tspan' => array('class' => true), 'g' => array('class' => true), 'defs' => array('class' => true), 'style' => array('class' => true), 'use' => array('class' => true), 'clipPath' => array('class' => true), 'mask' => array('class' => true), 'pattern' => array('class' => true), 'linearGradient' => array('class' => true), 'radialGradient' => array('class' => true), 'stop' => array('class' => true), 'filter' => array('class' => true), 'feBlend' => array('class' => true), 'feColorMatrix' => array('class' => true), 'feComponentTransfer' => array('class' => true), 'feComposite' => array('class' => true), 'feConvolveMatrix' => array('class' => true), 'feDiffuseLighting' => array('class' => true), 'feDisplacementMap' => array('class' => true), 'feFlood' => array('class' => true), 'feGaussianBlur' => array('class' => true), 'feImage' => array('class' => true), 'feMerge' => array('class' => true), 'feMorphology' => array('class' => true), 'feOffset' => array('class' => true), 'feSpecularLighting' => array('class' => true), 'feTile' => array('class' => true), 'feTurbulence' => array('class' => true), 'feDropShadow' => array('class' => true), 'foreignObject' => array('class' => true), 'image' => array('class' => true), 'marker' => array('class' => true), 'metadata' => array('class' => true), 'view' => array('class' => true), 'switch' => array('class' => true), 'symbol' => array('class' => true), 'title' => array('class' => true), 'desc' => array('class' => true), 'clipPath' => array('class' => true), 'mask' => array('class' => true), 'pattern' => array('class' => true), 'linearGradient' => array('class' => true), 'radialGradient' => array('class' => true), 'stop' => array('class' => true), 'filter' => array('class' => true), 'feBlend' => array('class' => true), 'feColorMatrix' => array('class' => true), 'feComponentTransfer' => array('class' => true), 'feComposite' => array('class' => true), 'feConvolveMatrix' => array('class' => tru

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Plugin advanced-responsive-video-embedder Arbitrary Code Execution

More from this source