WordfenceCVE-2024-5932

HistoryAug 20, 2024 - 2:15 a.m.

CVE-2024-5932

2024-08-2002:15:04

CWE-502

Wordfence

web.nvd.nist.gov

100

givewp

wordpress

php object injection

unauthenticated attackers

remote code execution

arbitrary files.

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.639

Percentile

97.9%

JSON

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.14.1 via deserialization of untrusted input from the ‘give_title’ parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to execute code remotely, and to delete arbitrary files.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

givewpgivewpRange<3.14.2wordpress

VendorProductVersionCPE
givewpgivewp*cpe:2.3:a:givewp:givewp:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
givewp	givewp	*	cpe:2.3:a:givewp:givewp::::::wordpress::*

CNA Affected

[
  {
    "vendor": "webdevmattcrom",
    "product": "GiveWP – Donation Plugin and Fundraising Platform",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "3.14.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

plugins.trac.wordpress.org/browser/give/tags/3.12.0/includes/login-register.php#L235

plugins.trac.wordpress.org/browser/give/tags/3.12.0/includes/process-donation.php#L420

plugins.trac.wordpress.org/browser/give/tags/3.12.0/src/DonorDashboards/Tabs/EditProfileTab/AvatarRoute.php#L51

plugins.trac.wordpress.org/browser/give/tags/3.12.0/vendor/tecnickcom/tcpdf/tcpdf.php#L7861

plugins.trac.wordpress.org/browser/give/tags/3.12.0/vendor/vendor-prefixed/fakerphp/faker/src/Faker/ValidGenerator.php#L80

plugins.trac.wordpress.org/changeset/3132247/

www.wordfence.com/blog/2024/08/4998-bounty-awarded-and-100000-wordpress-sites-protected-against-unauthenticated-remote-code-execution-vulnerability-patched-in-givewp-wordpress-plugin/

www.wordfence.com/threat-intel/vulnerabilities/id/93e2d007-8157-42c5-92ad-704dc80749a3?source=cve