Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
patchstackNguyen Van Khanh (SunCSR)PATCHSTACK:6B05DD1261702D4767C1CA08194B518D
HistoryAug 24, 2020 - 12:00 a.m.

WordPress Autoptimize plugin <= 2.7.6 - Authenticated Arbitrary File Upload vulnerability

2020-08-2400:00:00
Nguyen Van Khanh (SunCSR)
patchstack.com
7

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

JSON

Authenticated Arbitrary File Upload vulnerability found by Nguyen Van Khanh (SunCSR) in WordPress Autoptimize plugin (versions <= 2.7.6).

Solution

           Update the WordPress Autoptimize plugin to the latest available version (at least &lt;= 2.7.7).
CPENameOperatorVersion
autoptimizele2.7.6

Related

prion 3
wpvulndb 1
cve 3
wpexploit 1
packetstorm 1
openvas 1
prion
prion
Command injection
2020-09-03 15:15:00
Race condition
2021-06-21 20:15:00
Design/Logic Flaw
2021-06-21 20:15:00
wpvulndb
wpvulndb
Autoptimize < 2.7.7 - Authenticated Arbitrary File Upload
2020-08-24 00:00:00
cve
cve
CVE-2020-24948
2020-09-03 15:15:00
CVE-2021-24377
2021-06-21 20:15:00
CVE-2021-24376
2021-06-21 20:15:00
wpexploit
wpexploit
Autoptimize < 2.7.7 - Authenticated Arbitrary File Upload
2020-08-24 00:00:00
packetstorm
packetstorm
WordPress Autoptimize Shell Upload
2021-01-08 00:00:00
openvas
openvas
WordPress Autoptimize Plugin <= 2.7.6 RCE Vulnerability
2020-09-08 00:00:00

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

JSON
Related for PATCHSTACK:6B05DD1261702D4767C1CA08194B518D
prion3wpvulndb1cve3wpexploit1packetstorm1openvas1