8.8

CVE-2024-13418

Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload

Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload

Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files that can make remote code execution possible. This issue was escalated to Envato over two months from the date of this disclosure and the issue, while partially patched, is still vulnerable.
Mögliche Gegenmaßnahme
April Framework: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Benaa Framework: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Beyot Framework: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Auteur Framework: No known patch available. Please review the vulnerability's details in depth and employ mitigations based on your organization's risk tolerance. It may be best to uninstall the affected software and find a replacement.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
G5plus ≫ April SwPlatformwordpress Version <= 5.1
G5plus ≫ Auteur SwPlatformwordpress Version <= 7.1
G5plus ≫ Benaa SwPlatformwordpress Version <= 4.0.0
G5plus ≫ Beyot SwPlatformwordpress Version <= 6.0.6
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt April Framework
Version *-5.1
SystemWordPress Plugin
≫
Produkt Benaa Framework
Version *-4.0.0
SystemWordPress Plugin
≫
Produkt Beyot Framework
Version *-6.0.6
SystemWordPress Plugin
≫
Produkt Auteur Framework
Version *-7.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.437
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@wordfence.com 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

https://www.wordfence.com/threat-intel/vulnerabilities/id/bced4547-3264-43dc-8bb1-89a06f74ccbd?source=cve
Third Party Advisory
https://themeforest.net/item/beyot-wordpress-real-estate-theme/19514964
Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/bced4547-3264-43dc-8bb1-89a06f74ccbd
Third Party Advisory