by Kastro
Paper/Archive/CVE-2020-36706

CVE-2020-36706

simplepress Simple:Press Forum — Simple:Press – WordPress Forum Plugin <= 6.6.0 - Arbitrary File Upload

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.3.823 × 2016.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The Simple:Press – WordPress Forum Plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ~/admin/resources/jscript/ajaxupload/sf-uploader.php file in versions up to, and including, 6.6.0. This makes it possible for attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.

Affected

ProductAffectedFixed inSource
Simple:Press Forum< 6.6.16.6.1CNA
simple\:press_forum≤ 6.6.0–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/53eba5b4-7cc0-48e1-bb9c-6ed3207151ab?source=cverefblog.nintechnet.com/wordpress-simplepress-plugin-fixed-critical-vulnerabilitiesrefacunetix.com/vulnerabilities/web/wordpress-plugin-simple-press-wordpress-forum-arbitrary-file-upload-6-6-0refwpscan.com/vulnerability/27d4a8a5-9d81-4b42-92be-3f7d1ef22843