CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The External image replace plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'external_image_replace_get_posts::replace_post' function in all versions up to, and including, 1.0.8. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
External Image Replace versions 1.0.8 and earlier allow authenticated users to upload files without proper validation. An attacker with low-level site access can upload malicious files, potentially gaining full control of the site. The vulnerability affects file integrity and confidentiality. Update to a version newer than 1.0.8.
What an attacker can do
Upload malicious files to the site and execute arbitrary code with full site access.
Potential impact on your site
Compromised site with potential data theft, malware injection, or complete takeover by any authenticated user.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
