CVE-2021-4225 SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload

2022-04-2515:50:53

CWE-434

WPScan

www.cve.org

cve-2021-4225; wordpress plugin; file upload; security checks; windows servers; backdoors; vulnerable sites

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

45.2%

JSON

The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that on Windows servers, the security checks in place were insufficient, enabling bad actors to potentially upload backdoors on vulnerable sites.

CNA Affected

[
  {
    "product": "SP Project & Document Manager",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.24",
        "status": "affected",
        "version": "4.24",
        "versionType": "custom"
      }
    ]
  }
]