Multiple Wordpress Plugins PHP Object Injection Vulnerability
BID:101082
Info
Multiple Wordpress Plugins PHP Object Injection Vulnerability
| Bugtraq ID: | 101082 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 02 2017 12:00AM |
| Updated: | Oct 02 2017 12:00AM |
| Credit: | Matt Barry |
| Vulnerable: |
WordPress RegistrationMagic-Custom Registration Forms 3.7.9.2 WordPress RegistrationMagic-Custom Registration Forms 3.7.9.1 WordPress RegistrationMagic-Custom Registration Forms 3.7.9.0 WordPress Flickr Gallery 1.5.2 WordPress Flickr Gallery 1.5.1 WordPress Flickr Gallery 1.5 WordPress Appointments 2.2.1 WordPress Appointments 2.2 |
| Not Vulnerable: |
WordPress RegistrationMagic-Custom Registration Forms 3.7.9.3 WordPress Flickr Gallery 1.5.3 WordPress Appointments 2.2.2 |
Discussion
Multiple Wordpress Plugins PHP Object Injection Vulnerability
Multiple Wordpress Plugins are prone to a PHP object injection vulnerability because it fails to sufficiently sanitize user-supplied input.
Attackers can exploit this issue to inject arbitrary object in to the application to delete files, view files and execute local script code and to access or modify data, or exploit latent vulnerabilities in the underlying database execute arbitrary PHP code through specially crafted serialized objects.
The following plugins are affected:
Appointments Plugin versions prior to 2.2.2
Flickr Gallery Plugin versions prior to 1.5.3
RegistrationMagic-Custom Registration Forms Plugin versions prior to 3.7.9.3
Multiple Wordpress Plugins are prone to a PHP object injection vulnerability because it fails to sufficiently sanitize user-supplied input.
Attackers can exploit this issue to inject arbitrary object in to the application to delete files, view files and execute local script code and to access or modify data, or exploit latent vulnerabilities in the underlying database execute arbitrary PHP code through specially crafted serialized objects.
The following plugins are affected:
Appointments Plugin versions prior to 2.2.2
Flickr Gallery Plugin versions prior to 1.5.3
RegistrationMagic-Custom Registration Forms Plugin versions prior to 3.7.9.3
Exploit / POC
Multiple Wordpress Plugins PHP Object Injection Vulnerability
Reports indicate that this issue is being exploited in the wild.
Reports indicate that this issue is being exploited in the wild.
Solution / Fix
Multiple Wordpress Plugins PHP Object Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple Wordpress Plugins PHP Object Injection Vulnerability
References:
References:
- 3 Zero-Day Plugin Vulnerabilities Being Exploited In The Wild (wordfence)
- Appointments Plugin Homepage (Wordpress)
- Download RegistrationMagic-Custom Registration Forms Plugin Homepage (Wordpress)
- Flickr Gallery Plugin Homepage (Wordpress)
- WordPress HomePage (WordPress)