codevibrant WP Magazine Modules Lite Plugin up to 1.1.2 on WordPress blockLayout filename control

Summaryinfo

A vulnerability classified as problematic has been found in codevibrant WP Magazine Modules Lite Plugin up to 1.1.2 on WordPress. This vulnerability affects unknown code. Performing a manipulation of the argument blockLayout results in filename control. This vulnerability was named CVE-2024-5574. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in codevibrant WP Magazine Modules Lite Plugin up to 1.1.2 on WordPress. It has been classified as problematic. This affects some unknown processing. The manipulation of the argument blockLayout with an unknown input leads to a filename control vulnerability. CWE is classifying the issue as CWE-98. The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The WP Magazine Modules Lite plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.2 via the 'blockLayout' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

The weakness was presented by Matthew Rollings. The advisory is shared at wordfence.com. This vulnerability is uniquely identified as CVE-2024-5574 since 05/31/2024. The exploitability is told to be difficult. It is possible to initiate the attack remotely. Technical details are known, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• WordPress Plugin

Vendor

• codevibrant

Name

• WP Magazine Modules Lite Plugin

Version

• 1.1.0
• 1.1.1
• 1.1.2

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion