CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The Listeo Core plugin for WordPress is vulnerable to unauthenticated arbitrary media upload in all versions up to, and including, 2.0.27 via the "listeo_core_handle_dropped_media" function. This is due to missing authorization and capability checks on the AJAX endpoint handling file uploads. This makes it possible for unauthenticated attackers to upload arbitrary media to the site's media library, without achieving direct code execution.
Explanation of Vulnerability in Simple Terms
Listeo-Core Directory Plugin by Purethemes versions 2.0.27 and earlier allow unauthenticated attackers to upload files without proper validation. An attacker can upload malicious files to the server over the network without needing to log in or interact with a user. This could lead to unauthorized file storage or execution of uploaded content.
What an attacker can do
Upload files to the server without authentication or validation checks.
Potential impact on your site
Attackers can store or execute malicious files on your site, potentially compromising data or site functionality.
Conditions required to exploit
Network access to the vulnerable plugin; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
