Arbitrary File Upload Vulnerability in Drag and Drop Multiple File Upload Plugin for WordPress
CVE-2023-5822

9.8CRITICAL

Key Information:

Vendor
Wordpress
Status
Drag and Drop Multiple File Upload – Contact Form 7
Vendor
CVE Published:
22 November 2023

Summary

The Drag and Drop Multiple File Upload plugin for WordPress is susceptible to arbitrary file uploads due to inadequate file type validation in the 'dnd_upload_cf7_upload' function. This vulnerability allows unauthenticated attackers to exploit sites using the plugin in versions up to and including 1.3.7.3. If a user with editing privileges adds a 'multiple file upload' field that accepts all file types ('*'), it opens up the possibility for remote code execution, compromising site integrity and user security.

Affected Version(s)

Drag and Drop Multiple File Upload – Contact Form 7 * <= 1.3.7.3

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/drag-and-drop-...
https://plugins.trac.wordpress.org/browser/drag-and-drop-...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

István Márton
.