CVE-2024-10763

CRITICALNuclei

Campress <= 1.35 - Unauthenticated Local File Inclusion

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-10763 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The Campress theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.35 via the 'campress_woocommerce_get_ajax_products' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 13, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Campress

Browse ApusTheme / Campress

Default status: unaffected

CVE ListThrough 1.35affected

Nuclei templates

1
ProjectDiscoveryCRITICALWordPress Campress Theme <= 1.35 - Unauthenticated Local File InclusionCVSS 9.8

Campress theme for WordPress up to 1.35 contains a local file inclusion caused by 'campress_woocommerce_get_ajax_products' function, letting unauthenticated attackers include and execute arbitrary PHP files, exploit requires no authentication.

Impact

Attackers can include and execute arbitrary PHP files, leading to remote code execution and potential full server compromise.

Remediation

Update to the latest version beyond 1.35.

WeaknessesCWE-98
Authorspussycat0x
Template tagscvecve2024wordpresswp-themecampresslfiunauth
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-themes/campress/campress-135-unauthenticated-local-file-inclusion

Source: ProjectDiscovery

References

3