Paper/Archive/CVE-2023-4596

CVE-2023-4596

wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder — Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload

EPSS 14%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 96.6.966 × 2019.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function in versions up to, and including, 1.24.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affected

ProductAffectedFixed inSource

Forminator Forms – Contact Form, Payment Form & Custom Form Builder≤ 1.24.6–CNA

Scores by source

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/9cd87da6-1f4c-4a15-8ebb-6e0f8ef72513?source=cve refexploit-db.com/exploits/51664 refplugins.trac.wordpress.org/changeset/2954409/forminator/trunk/library/fields/postdata.php