WordPressのConfectionに認証不要のRCE脆弱性
Summary
WordPressプラグインConfection WordPress Cableの0.4.0から0.4.7に、ログイン不要でサーバー上のPHPコードを実行される脆弱性があります。該当版を使うサイトは、修正版が出るまでプラグインを削除し、改ざんの跡がないかも調べてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WordPressプラグインConfection WordPress Cableの0.4.0から0.4.7に、ログイン不要でサーバー上のPHPコードを実行される脆弱性があります。該当版を使うサイトは、修正版が出るまでプラグインを削除し、改ざんの跡がないかも調べてください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| WordPress プラグインConfection WordPress Cable |
0.4.0 – 0.4.7→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users to execute arbitrary PHP code on the server.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web contact@wpscan.com
- web nvd.nist.gov
- web wpscan.com
- web github.com