Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload
CVE-2021-24161

8.8HIGH

Key Information:

Vendor
Wordpress
Status
Responsive Menu – Create Mobile-friendly Menu
Responsive Menu Pro
Vendor
CVE Published:
5 April 2021

Summary

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site.

Affected Version(s)

Responsive Menu – Create Mobile-Friendly Menu 4.0.4

Responsive Menu Pro 4.0.4

References

https://www.wordfence.com/blog/2021/02/multiple-vulnerabi...
x_refsource_MISC
https://wpscan.com/vulnerability/efca27e0-bdb6-4497-8330-...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Chloe Chamberland
.