Tournamatchに任意ファイル削除の脆弱性、4.7.1で修正
Summary
WordPressプラグインTournamatchの4.7.1未満に、Subscriber権限のユーザーがサーバー上のファイルを削除でき、サイト乗っ取りにつながる脆弱性があります。該当サイトは4.7.1へ更新し、会員アカウントも見直してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WordPressプラグインTournamatchの4.7.1未満に、Subscriber権限のユーザーがサーバー上のファイルを削除でき、サイト乗っ取りにつながる脆弱性があります。該当サイトは4.7.1へ更新し、会員アカウントも見直してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| CVETournamatch |
< 4.7.1→ 4.7.1 |
4.7.1 |
Original description The description as published by the source.
The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile or team image before deleting it when a new image is uploaded, allowing users with a role as low as Subscriber to delete arbitrary files on the server, such as wp-config.php, which can lead to a full site takeover.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web contact@wpscan.com
- web nvd.nist.gov
- web wpscan.com
- web github.com