CVE-2020-6008: Malicious File Upload
Published Mar 31, 2020
·Updated
LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution
Affected Software
1 affected component
LifterLMS LifterLMS Wordpress<3.37.15
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress plugin: LifterLMSto a version that resolves this vulnerability.Fixed in 3.37.15
Event History
Mar 31, 2020
CVE Published
via MITRE·02:10 PM
Data Sourced
via MITRE·02:10 PM
DescriptionWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for the LifterLMS Wordpress plugin vulnerability?
The vulnerability ID for the LifterLMS Wordpress plugin vulnerability is CVE-2020-6008.
2
What is the severity of CVE-2020-6008?
CVE-2020-6008 has a severity value of 9.8, which is classified as critical.
3
How does the LifterLMS Wordpress plugin vulnerability allow arbitrary file write?
The LifterLMS Wordpress plugin vulnerability allows arbitrary file write, which can lead to remote code execution.
4
Which versions of the LifterLMS Wordpress plugin are affected by CVE-2020-6008?
Versions below 3.37.15 of the LifterLMS Wordpress plugin are affected by CVE-2020-6008.
5
How can I fix the LifterLMS Wordpress plugin vulnerability?
To fix the LifterLMS Wordpress plugin vulnerability, update to version 3.37.15 or newer.