HTTP: WordPress Posts Plugin Arbitrary File Upload
This signature detects attempts to exploit a known vulnerability against Posts WordPress plugin. A successful attack can lead to the upload of an arbitrary file.
Extended Description
The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain remote code execution, in versions up to and including 5.3.2.
Affected Products
Wordpress_popular_posts_project wordpress_popular_posts
References
CVE: CVE-2021-42362
Short Name
HTTP:PHP:WP-POSTS-FU
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Arbitrary CVE-2021-42362 File Plugin Posts Upload WordPress
Release Date
04/26/2022
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3741
False Positive
Unknown
Vendors
Wordpress_popular_posts_project