Arbitrary File Deletion Vulnerability in SurveyJS Drag & Drop WordPress Form Builder

CVE-2024-12544

What is CVE-2024-12544?

The SurveyJS Drag & Drop WordPress Form Builder plugin is affected by a vulnerability that allows authenticated users with Subscriber-level access or higher to delete arbitrary files from the server. This vulnerability arises from a missing capability check in the callback function of the SurveyJS_DeleteFile class, which is present in all versions up to and including 1.12.17. If exploited, this could lead to severe security risks, including remote code execution, especially if critical files like wp-config.php are deleted. Furthermore, as of version 1.12.20, the plugin remains vulnerable to Cross-Site Request Forgery (CSRF) exploits, creating additional avenues for potential attacks.

References