Arbitrary file upload in WordPress - CVE-2024-31210

Vulnerability identifier: #VU85992

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-31210

CWE-ID: CWE-434

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to compromise vulnerable system.

The vulnerability exists due to insufficient validation of file during file upload in the Plugin Installer. A remote authenticated administrator can bypass implemented security restrictions and upload a malicious PHP file on the server.

WordPress
Debian Linux
Fedora
wordpress
wordpress (Debian package)

Install updates from vendor's website.

WordPress - addressed in versions 4.1.40, 4.2.37, 4.3.33, 4.4.32, 4.5.31, 4.6.28, 4.7.28, 4.8.24, 4.9.25, 5.0.21, 5.1.18, 5.2.20, 5.3.17, 5.4.15, 5.5.14, 5.6.13, 5.7.11, 5.8.9, 5.9.9, 6.0.7, 6.1.5, 6.2.4, 6.3.3, 6.4.3
wordpress - addressed in versions 5.1.18-1.el7, 6.4.3-1.el9, 6.4.3-1.fc38, 6.4.3-1.fc39
wordpress (Debian package) - addressed in versions 5.7.11+dfsg1-0+deb11u1, 6.1.6+dfsg1-0+deb12u1

• https://wordpress.org/documentation/wordpress-version/version-6-4-3/
• https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-x79f-xrjv-jx5r

• Multiple vulnerabilities in WordPress
• Fedora EPEL 9 update for wordpress
• Fedora 39 update for wordpress
• Fedora 38 update for wordpress
• Fedora EPEL 7 update for wordpress
• Debian update for wordpress