Forminator < 1.24.6 - Unauthenticated Arbitrary File Upload via upload_post_image()
Title source: llmExploitation Summary
CVE-2023-4596 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including Mehmet Kelepçe, E1A, X-Projetion. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated remote command execution vulnerability in WordPress Plugin Forminator 1.24.6 via file upload. The vulnerability allows an attacker to upload a malicious PHP file through the 'postdata-1-post-image' parameter, bypassing file extension checks.
Description
The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function in versions up to, and including, 1.24.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Exploits (4)
This exploit demonstrates an unauthenticated remote command execution vulnerability in WordPress Plugin Forminator 1.24.6 via file upload. The vulnerability allows an attacker to upload a malicious PHP file through the 'postdata-1-post-image' parameter, bypassing file extension checks.
This repository contains a functional Python exploit for CVE-2023-4596, an unauthenticated arbitrary file upload vulnerability in the WordPress Forminator plugin. The exploit automates the process of uploading a malicious PHP file to achieve remote code execution (RCE) on vulnerable installations.
This repository contains a bash script that scans for CVE-2024-6387 by checking OpenSSH versions on local and remote systems using nmap. It identifies vulnerable versions and excludes patched ones, providing a detailed report.
This repository contains a functional Python exploit for CVE-2023-4596, targeting unauthenticated remote command execution via arbitrary file uploads in the Forminator plugin for WordPress. The script includes both a vulnerability checker and an exploit module capable of achieving RCE.
Nuclei Templates (1)
http.html:/wp-content/plugins/forminator
body=/wp-content/plugins/forminator
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H