Description

WordPress Plugin Broken Link Checker is prone to a deserialization vulnerability. Attackers can possibly exploit this issue to call files using a PHAR wrapper that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions, granted a POP chain is also present. WordPress Plugin Broken Link Checker version 1.11.16 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.11.17 or latest

References

https://wpscan.com/vulnerability/ecfc0221-92c0-49a6-88a3-f1379303bb56

https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2438

https://plugins.svn.wordpress.org/broken-link-checker/trunk/readme.txt

Related Vulnerabilities

WordPress 3.8.x PHP Object Injection (3.8 - 3.8.35)

WordPress Plugin WP Shieldon-WordPress Firewall Cross-Site Scripting (1.6.3)

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-9578)

Oracle Database Server CVE-2010-0892 Vulnerability (CVE-2010-0892)

Oracle Database Server CVE-2014-6453 Vulnerability (CVE-2014-6453)

Severity

High

Classification

CVE-2022-2438 CWE-502 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update