Broadstreet Ad Widget Plugin up to 2.11.x Modal View views/modal/index.php require step file inclusion

Summaryinfo

A vulnerability, which was classified as critical, has been found in Broadstreet Ad Widget Plugin up to 2.11.x. This affects the function require of the file views/modal/index.php of the component Modal View. This manipulation of the argument step causes file inclusion. This vulnerability is handled as CVE-2017-20289. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical was found in Broadstreet Ad Widget Plugin up to 2.11.x. Affected by this vulnerability is the function require of the file views/modal/index.php of the component Modal View. The manipulation of the argument step with an unknown input leads to a file inclusion vulnerability. The CWE definition for the vulnerability is CWE-73. The product allows user input to control or influence paths or file names that are used in filesystem operations. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in the 'step' parameter, optionally with a null byte, to include local files and execute PHP code. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.

It is possible to read the advisory at wpscan.com. This vulnerability is known as CVE-2017-20289 since 10/14/2026. The exploitation appears to be easy. The attack can be launched remotely. Technical details of the vulnerability are known, but there is no available exploit.

By approaching the search of inurl:views/modal/index.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 2.12.0 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Broadstreet

Name

• Ad Widget Plugin

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10
• 2.11

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion