CVE-2024-3240: ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection
The ConvertPlug plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.25 via deserialization of untrusted input from the 'settingsencoded' attribute of the 'smileinfobar' shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3240?
CVE-2024-3240 has a medium severity rating due to the potential for authenticated attackers to exploit the vulnerability.
How do I fix CVE-2024-3240?
To fix CVE-2024-3240, update the ConvertPlug plugin to the latest version that addresses the PHP Object Injection vulnerability.
Who is affected by CVE-2024-3240?
CVE-2024-3240 affects all versions of the ConvertPlug plugin for WordPress up to and including version 3.5.25.
What type of vulnerability is CVE-2024-3240?
CVE-2024-3240 is a PHP Object Injection vulnerability caused by the deserialization of untrusted input.
Can CVE-2024-3240 be exploited remotely?
Yes, CVE-2024-3240 can be exploited by authenticated attackers with appropriate permissions on the affected WordPress site.