CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Post By Email plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the save_attachments function in all versions up to, and including, 1.0.4b. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
Post By Email versions 1.0.4b and earlier contain a command injection vulnerability that allows unauthenticated attackers to run arbitrary code on the site with no user interaction required. The vulnerability exists in how the plugin processes email input without proper sanitization. An attacker can exploit this remotely over the network to gain full control of the affected site.
What an attacker can do
Run arbitrary code on the site and take complete control without needing to log in.
Potential impact on your site
Complete site compromise: attacker can read all data, modify content, create admin accounts, or delete the site.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
