CVE-2024-8725

Description

Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions. This is due to a lack of proper checks to ensure lower-privileged roles cannot upload .css and .js files to arbitrary directories. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an administrator, to upload .css and .js files to any directory within the WordPress root directory, which could lead to Stored Cross-Site Scripting. The Advanced File Manager Shortcodes plugin must be installed to exploit this vulnerability.

Reserved 2024-09-11 | Published 2024-09-26 | Updated 2024-09-26 | Assigner Wordfence

Problem types

CWE-434 Unrestricted Upload of File with Dangerous Type

Product status

Default status
unaffected

*
affected

Timeline

2024-09-25:

Disclosed

Credits

TANG Cheuk Hei finder

References

www.wordfence.com/...-93a6-480f-a877-ca47bd133bb6?source=cve

plugins.trac.wordpress.org/...application/class_fma_main.php

plugins.trac.wordpress.org/...cation/class_fma_shortcode.php

plugins.trac.wordpress.org/changeset/3157713/

cve.org (CVE-2024-8725)

nvd.nist.gov (CVE-2024-8725)

Download JSON