Description

WordPress is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to delete arbitrary files in the context of the webserver process, rendering the website unusable, or even to execute arbitrary code on the webserver. WordPress versions 4.9.x ranging from 4.9 and up to (and including) 4.9.6 are vulnerable.

Remediation

Update to WordPress version 4.9.7 or latest

References

https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/

http://blog.vulnspy.com/2018/06/27/Wordpress-4-9-6-Arbitrary-File-Delection-Vulnerbility-Exploit/

https://www.exploit-db.com/exploits/44949/

https://packetstormsecurity.com/files/148333/WordPress-4.9.6-Arbitrary-File-Deletion.html

https://www.wordfence.com/blog/2018/07/details-of-an-additional-file-deletion-vulnerability-patched-in-wordpress-4-9-7/

http://blog.nsfocus.net/wordpress-delete-any-file/

https://wordpress.org/news/2018/07/wordpress-4-9-7-security-and-maintenance-release/

Related Vulnerabilities

WordPress Plugin MemberSonic Lite Security Bypass (1.2)

WordPress Plugin Subscribe To Comments Reloaded Cross-Site Scripting (150611)

WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Multiple Security Bypass Vulnerabilities (8.0)

WordPress Plugin Arigato Autoresponder and Newsletter Cross-Site Scripting (2.3.1)

WordPress Plugin Contest Gallery-Photo Contest for WordPress Cross-Site Scripting (14.1.7)

Severity

High

Classification

CVE-2018-12895 CWE-73 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update