CVE-2017-16949: Malicious File Upload
An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=apfileuploadaction&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16949?
The severity of CVE-2017-16949 is critical with a severity value of 9.8.
What is the affected software for CVE-2017-16949?
The affected software for CVE-2017-16949 is the Accesspress Anonymous Post Pro plugin through version 3.1.9 for WordPress.
What is the vulnerability description of CVE-2017-16949?
CVE-2017-16949 is a vulnerability in the Accesspress Anonymous Post Pro plugin for WordPress that allows improper input sanitization and override of allowed file extensions and upload file size.
Are there any references for CVE-2017-16949?
Yes, here are some references for CVE-2017-16949: 1) http://packetstormsecurity.com/files/145398/Accesspress-Anonymous-Post-Pro-Unauthenticated-Arbitrary-File-Upload.html 2) https://wpvulndb.com/vulnerabilities/8977 3) https://www.exploit-db.com/exploits/43324/
How can I fix CVE-2017-16949?
To fix CVE-2017-16949, update the Accesspress Anonymous Post Pro plugin to a version higher than 3.1.9.