CVE-2023-3342: Malicious File Upload
First published: Thu Jul 13 2023(Updated: )
The User Registration plugin for WordPress is vulnerable to arbitrary file uploads due to a hardcoded encryption key and missing file type validation on the 'ur_upload_profile_pic' function in versions up to, and including, 3.0.2. This makes it possible for authenticated attackers with subscriber-level capabilities or above to upload arbitrary files on the affected site's server which may make remote code execution possible. This was partially patched in version 3.0.2 and fully patched in version 3.0.2.1.
Credit: security@wordfence.com security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WPEverest User Registration | <3.0.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lana.codes/lanavdb/c0a58dff-7a5b-4cc0-82d6-2255e61d801c/
- https://plugins.trac.wordpress.org/browser/user-registration/tags/3.0.1/includes/functions-ur-core.php#L3156
- https://www.wordfence.com/threat-intel/vulnerabilities/id/a979e885-f7dd-4616-a881-64f3d97c309d?source=cve
- https://plugins.trac.wordpress.org/changeset/2933689/user-registration/trunk/includes/functions-ur-core.php
- http://packetstormsecurity.com/files/173434/WordPress-User-Registration-3.0.2-Arbitrary-File-Upload.html
Frequently Asked Questions
What is CVE-2023-3342?
CVE-2023-3342 is a vulnerability in the User Registration plugin for WordPress that allows authenticated attackers to upload arbitrary files.
How severe is CVE-2023-3342?
CVE-2023-3342 has a severity rating of 9.9, which is considered critical.
How does CVE-2023-3342 impact WordPress?
CVE-2023-3342 impacts WordPress by allowing authenticated attackers to upload arbitrary files using the User Registration plugin.
How can I mitigate the vulnerability in User Registration plugin?
To mitigate the vulnerability in the User Registration plugin, update to version 3.0.2.1 or later.
Where can I find more information about CVE-2023-3342?
You can find more information about CVE-2023-3342 at the following references: [LINK1], [LINK2], [LINK3].
- collector/nvd-latest
- agent/author
- agent/type
- agent/softwarecombine
- agent/remedy
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- vendor/wpeverest
- canonical/wpeverest user registration