Lucene search

WordfenceCVE-2024-7856

HistoryAug 29, 2024 - 11:15 a.m.

CVE-2024-7856

2024-08-2911:15:29

CWE-862

Wordfence

web.nvd.nist.gov

cve-2024-7856

audio player

podcast player

radio

sonaar

wordpress

unauthorized deletion

capability check

arbitrary file deletion

remote code execution

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the removeTempFiles() function and insufficient path validation on the ‘file’ parameter in all versions up to, and including, 5.7.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files which can make remote code execution possible when wp-config.php is deleted.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

sonaarmp3_audio_player_for_music\,_radio_\&_podcastRange<5.7.1wordpress

VendorProductVersionCPE
sonaarmp3_audio_player_for_music\,_radio_\&_podcast*cpe:2.3:a:sonaar:mp3_audio_player_for_music\,_radio_\&_podcast:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
sonaar	mp3_audio_player_for_music\,_radio_\&_podcast	*	cpe:2.3:a:sonaar:mp3_audio_player_for_music\,_radio_\&_podcast::::::wordpress::*

CNA Affected

[
  {
    "vendor": "sonaar",
    "product": "MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "5.7.0.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

plugins.trac.wordpress.org/browser/mp3-music-player-by-sonaar/tags/5.7.0.1/includes/class-sonaar-music.php#L739

plugins.trac.wordpress.org/browser/mp3-music-player-by-sonaar/tags/5.7.0.1/includes/class-sonaar-music.php#L755

plugins.trac.wordpress.org/changeset/3142445/mp3-music-player-by-sonaar/trunk/includes/class-sonaar-music.php

www.wordfence.com/threat-intel/vulnerabilities/id/43adc9dd-1780-440f-90c2-ff05a22eb084?source=cve

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

22.0%

JSON

Related for CVE-2024-7856