CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
What the vulnerability does
The WordPress plugin Asset-Manager version 2.0 and below contains an unauthenticated arbitrary file upload vulnerability in upload.php. The endpoint fails to properly validate and restrict uploaded file types, allowing remote attackers to upload malicious PHP scripts to a predictable temporary directory. Once uploaded, the attacker can execute the file via a direct HTTP GET request, resulting in remote code execution under the web server’s context.
Explanation of Vulnerability in Simple Terms
Asset Manager versions 2.0 and earlier allow unauthenticated attackers to upload arbitrary files to the server without restriction. An attacker can upload malicious files (such as PHP scripts) over the network with no authentication required. This can lead to remote code execution and complete compromise of the affected site.
What an attacker can do
Upload arbitrary files to the server and execute malicious code without authentication.
Potential impact on your site
An attacker can run arbitrary code on your site, steal data, modify content, or take full control without needing a user account.
Conditions required to exploit
Network access to the vulnerable Asset Manager installation; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
