Ultra Addons for Contact Form 7に脆弱性
Summary
WordPressのプラグインUltra Addons for Contact Form 7に、認証なしでサーバー上のファイルを削除される脆弱性が公表されました。PDF生成機能を使うサイトは、版と修正版の有無を確認し、不要なら機能を止めてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WordPressのプラグインUltra Addons for Contact Form 7に、認証なしでサーバー上のファイルを削除される脆弱性が公表されました。PDF生成機能を使うサイトは、版と修正版の有無を確認し、不要なら機能を止めてください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| themefic | Ultra Addons for Contact Form 7 |
≤ 3.5.54 |
— |
Original description The description as published by the source.
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the _getObjAttr function in all versions up to, and including, 3.5.54. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This requires the PDF Generator add-on to be active and a Contact Form 7 form to be configured for PDF generation, as the WPCF7_Submission POP gadget chain relies on CF7 being present to complete the file deletion via __destruct(). Note: This vulnerability can only be exploited when the PDF generator feature is enabled.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web wordfence.com
- web plugins.svn.wordpress.org
- web plugins.trac.wordpress.org
- web nvd.nist.gov
- web github.com