CVE-2024-13770: Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Unauthenticated PHP Object Injection
The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of untrusted input 'viewmoreposts' AJAX action. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. The developer opted to remove the software from the repository, so an update is not available and it is recommended to find a replacement software.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13770?
CVE-2024-13770 has a high severity rating due to its potential for arbitrary code execution through PHP Object Injection.
How do I fix CVE-2024-13770?
To fix CVE-2024-13770, update the Puzzles WP Magazine theme and WordPress RTL theme to version 4.2.5 or later.
What versions are affected by CVE-2024-13770?
CVE-2024-13770 affects all versions of the Puzzles WP Magazine and WordPress RTL theme up to and including version 4.2.4.
Who can be affected by CVE-2024-13770?
Unauthenticated attackers can exploit CVE-2024-13770 to execute malicious code on affected sites.
What is the cause of CVE-2024-13770?
CVE-2024-13770 is caused by the deserialization of untrusted input in the 'view_more_posts' AJAX action.