CVE-2024-8479

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-8479
The The Simple Spoiler plugin for WordPress is vulnerable to arbitrary shortcode execution in versions 1.2 to 1.3. This is due to the plugin adding the filter add_filter('comment_text', 'do_shortcode'); which will run all shortcodes in comments. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.

7.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://plugins.trac.wordpress.org/browser/simple-spoiler/trunk/simple-spoiler.php#L108 Product
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3151179%40simple-spoiler&new=3151179%40simple-spoiler&sfp_email=&sfph_mail= Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/8ffc76d8-b841-4c26-bbc6-1f96664efe36?source=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:webliberty:simple_spoiler:*:*:*:*:*:wordpress:*:*
History

27 Sep 2024, 16:12

Type Values Removed Values Added
References () https://plugins.trac.wordpress.org/browser/simple-spoiler/trunk/simple-spoiler.php#L108 - () https://plugins.trac.wordpress.org/browser/simple-spoiler/trunk/simple-spoiler.php#L108 - Product
References () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3151179%40simple-spoiler&new=3151179%40simple-spoiler&sfp_email=&sfph_mail= - () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3151179%40simple-spoiler&new=3151179%40simple-spoiler&sfp_email=&sfph_mail= - Patch
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/8ffc76d8-b841-4c26-bbc6-1f96664efe36?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/8ffc76d8-b841-4c26-bbc6-1f96664efe36?source=cve - Third Party Advisory
Summary
  • (es) El complemento The Simple Spoiler para WordPress es vulnerable a la ejecución arbitraria de códigos cortos en las versiones 1.2 a 1.3. Esto se debe a que el complemento agrega el filtro add_filter('comment_text', 'do_shortcode'); que ejecutará todos los códigos cortos en los comentarios. Esto hace posible que atacantes no autenticados ejecuten códigos cortos arbitrarios.
CPE cpe:2.3:a:webliberty:simple_spoiler:*:*:*:*:*:wordpress:*:*
First Time Webliberty
Webliberty simple Spoiler

14 Sep 2024, 04:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-14 04:15

Updated : 2024-09-27 16:12

NVD link : CVE-2024-8479

Mitre link : CVE-2024-8479

CVE.ORG link : CVE-2024-8479

JSON object : View

Products Affected

webliberty

  • simple_spoiler
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')