Lucene search

WordfenceCVE-2021-4354

HistoryJun 07, 2023 - 2:15 a.m.

CVE-2021-4354

2023-06-0702:15:13

CWE-434

Wordfence

web.nvd.nist.gov

pwa

amp

wordpress

vulnerability

arbitrary file upload

file type validation

authenticated attackers

remote code execution

nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.013

Percentile

85.7%

JSON

The PWA for WP & AMP for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pwaforwp_splashscreen_uploader function in versions up to, and including, 1.7.32. This makes it possible for authenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

Affected configurations

Nvd

Vulners

Node

magazine3pwa_for_wp_\&_ampRange<1.7.33wordpress

VendorProductVersionCPE
magazine3pwa_for_wp_\&_amp*cpe:2.3:a:magazine3:pwa_for_wp_\&_amp:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
magazine3	pwa_for_wp_\&_amp	*	cpe:2.3:a:magazine3:pwa_for_wp_\&_amp::::::wordpress::*

CNA Affected

[
  {
    "vendor": "magazine3",
    "product": "PWA for WP & AMP",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.7.32",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

blog.nintechnet.com/wordpress-pwa-for-wp-and-amp-plugin-fixed-vulnerabilities/

www.wordfence.com/threat-intel/vulnerabilities/id/6082791e-feac-41f7-b565-9d98624ddf50?source=cve

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.013

Percentile

85.7%

JSON

Related for CVE-2021-4354