CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The URL Media Uploader plugin for WordPress is vulnerable to unauthorized safe file uploads due to a missing capability check on the url_media_uploader_url_upload_ajax_handler() function in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload safe media files.
Explanation of Vulnerability in Simple Terms
URL Media Uploader versions 1.0.1 and earlier lack proper authorization checks on file upload operations. A logged-in user with low privileges can upload files without appropriate permission validation, potentially modifying site content or introducing malicious files. The vulnerability requires valid user credentials but no special interaction.
What an attacker can do
Upload files to the site without proper permission checks.
Potential impact on your site
Unauthorized users may upload files, risking malware injection or content tampering.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
