by Kastro
Paper/Archive/CVE-2020-36875

CVE-2020-36875

ACCESSALLY, INC. AccessAlly — AccessAlly < 3.3.2 Unauthenticated Arbitrary PHP Code Execution

EPSS 0.8%public exploitCVSS 9.3
critical.is priorityof 100
49
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 55.2.552 × 2011.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

AccessAlly WordPress plugin versions prior to 3.3.2 contain an unauthenticated arbitrary PHP code execution vulnerability in the Login Widget. The plugin processes the login_error parameter as PHP code, allowing an attacker to supply and execute arbitrary PHP in the context of the WordPress web server process, resulting in remote code execution.

Affected

ProductAffectedFixed inSource
AccessAlly< 3.3.23.3.2CNA

Scores by source

VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

patchaccessally.com/software-release/accessally-3-3-2exploitwpscan.com/vulnerability/c644de6d-098d-4889-b75d-53fd2b89ff4dwriteupvulncheck.com/advisories/accessally-unauthenticated-arbitrary-php-code-execution