CVE-2024-4033: All-in-One Video Gallery <= 3.6.4 - Authenticated (Contributor+) Arbitrary File Upload via featured image
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the aiovgcreateattachmentfromexternalimageurl function in all versions up to, and including, 3.6.4. This makes it possible for authenticated attackers, with contributor access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4033?
CVE-2024-4033 is rated as a high severity vulnerability due to its potential for unauthorized file uploads.
How do I fix CVE-2024-4033?
To fix CVE-2024-4033, update the All-in-One Video Gallery plugin to version 3.6.5 or later.
Who is affected by CVE-2024-4033?
CVE-2024-4033 affects all versions of the All-in-One Video Gallery plugin for WordPress up to and including version 3.6.4.
What type of vulnerability is CVE-2024-4033?
CVE-2024-4033 is classified as an arbitrary file upload vulnerability due to insufficient file type validation.
Is authentication required to exploit CVE-2024-4033?
Yes, an authenticated attacker can exploit CVE-2024-4033 to upload arbitrary files.