AdRotate Banner Manager Vulnerable to Arbitrary File Uploads

CVE-2022-1206

Summary

The AdRotate Banner Manager plugin for WordPress contains a vulnerability stemming from inadequate file extension sanitization in the adrotate_insert_media() function. This flaw is present in all versions of the plugin up to and including 5.13.2. Authenticated attackers with administrator-level access and above are able to upload malicious files with double extensions to the server of the affected site. The exploitability of this vulnerability is dependent on specific configurations that might execute the first file extension present, potentially allowing for remote code execution. Administrators of WordPress sites using this plugin should take caution to update to secure versions and implement additional security measures.

References