Lucene search

WpvulndbWPVDB-ID:FB46A0F1-1B4B-4742-8EAF-A317AA5E80BB

HistoryMay 20, 2024 - 12:00 a.m.

Copymatic – AI Content Writer & Generator < 1.7 - Unauthenticated Arbitrary File Upload

2024-05-2000:00:00

wpscan.com

wordpress

vulnerable

arbitrary file upload

remote code execution

unauthenticated

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site’s server which may make remote code execution possible.

CPENameOperatorVersion
eq1.7

CPE	Name	Operator	Version
		eq	1.7

References

www.wordfence.com/threat-intel/vulnerabilities/id/3def97d8-4f25-4a67-bdce-7664a5c318bc

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for WPVDB-ID:FB46A0F1-1B4B-4742-8EAF-A317AA5E80BB