CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Simple-File-List Plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.2.2 via the rename function which can be used to rename uploaded PHP code with a png extension to use a php extension. This allows unauthenticated attackers to execute code on the server.
Explanation of Vulnerability in Simple Terms
Simple File List versions before 4.2.3 do not properly validate uploaded files, allowing anyone to upload arbitrary files to the site without authentication. An attacker can upload malicious PHP scripts or other executable code that will run on the server. This grants complete control over the site's files and data.
What an attacker can do
Upload and execute arbitrary files on the server without needing a login.
Potential impact on your site
Attacker gains full control of your site, can steal data, modify content, or use it to attack visitors.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
