WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
CVE-2023-5886

8.8HIGH

Key Information:

Vendor
Wordpress
Status
Export any WordPress data to XML/CSV
WP All Export Pro
Vendor
CVE Published:
18 December 2023

Summary

A vulnerability exists in the Export any WordPress data to XML/CSV plugin and WP All Export Pro plugin due to insufficient nonce verification in the request lifecycle. Attackers capable of uploading files can initiate unauthorized actions on behalf of logged-in users. This exploitation may result in PHAR deserialization, which could lead to the execution of arbitrary code remotely, facilitating severe impacts on the affected WordPress installations.

Affected Version(s)

Export any WordPress data to XML/CSV 0 < 1.4.0

WP All Export Pro 0 < 1.8.6

References

https://wpscan.com/vulnerability/0a08e49d-d34e-4140-a15d-...
exploitvdb-entrytechnical-description

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

WPScan
.