Description

WordPress Plugin Broken Link Checker is prone to a deserialization vulnerability. Attackers can possibly exploit this issue to call files using a PHAR wrapper that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions, granted a POP chain is also present. WordPress Plugin Broken Link Checker version 1.11.16 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.11.17 or latest

References

https://wpscan.com/vulnerability/ecfc0221-92c0-49a6-88a3-f1379303bb56

https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2438

https://plugins.svn.wordpress.org/broken-link-checker/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.14)

PHP Other Vulnerability (CVE-2003-0860)

WordPress Plugin Ultimate WordPress Auction Multiple Vulnerabilities (4.0.5)

D3.js Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-16044)

WordPress Plugin Cool Video Gallery Command Injection (1.9)

Severity

High

Classification

CVE-2022-2438 CWE-502 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update