CVE-2024-5853

moderate-risk
Published 2024-06-19

The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the sirv_upload_file_by_chanks AJAX action in all versions up to, and including, 7.2.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.

Do I need to act?

!
10.5% chance of exploitation in next 30 days
EPSS score — higher than 90% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.9/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Sirv

Affected Vendors

Sirv

References (4)

Patch https://plugins.trac.wordpress.org/changeset/3103410/sirv/trunk/sirv.php
Third Party Advisory https://www.wordfence.com/threat-intel/vulnerabilities/id/e89b40ec-1952-46e3-a91...
Patch https://plugins.trac.wordpress.org/changeset/3103410/sirv/trunk/sirv.php
Third Party Advisory https://www.wordfence.com/threat-intel/vulnerabilities/id/e89b40ec-1952-46e3-a91...
49
/ 100
moderate-risk
Severity 33/34 · Critical
Exploitability 11/34 · Low
Exposure 5/34 · Minimal