CVE-2024-12252
CRITICALSEO LAT Auto Post <= 2.2.1 - Unauthenticated File Overwrite and Remote Code Execution via remote_update AJAX Action
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-12252. PoCs published by Nxploited, Boshe99, RandomRobbieBF.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-12252, targeting the SEO LAT Auto Post WordPress plugin. The exploit leverages a missing capability check on the `remote_update` AJAX action to overwrite a plugin file, achieving remote code execution.
Description
The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can be leveraged to achieve remote code execution.
Exploits (3)
This repository contains a functional exploit for CVE-2024-12252, targeting the SEO LAT Auto Post WordPress plugin. The exploit leverages a missing capability check on the `remote_update` AJAX action to overwrite a plugin file, achieving remote code execution.
The repository contains functional exploit code for CVE-2024-12252, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the ability to upload a malicious file to a vulnerable target.
The repository contains a functional proof-of-concept exploit for CVE-2024-12252, demonstrating how an unauthenticated attacker can overwrite the `seo-beginner-auto-post.php` file in the SEO LAT Auto Post WordPress plugin (version <= 2.2.1) via a missing capability check on the `remote_update` AJAX action, leading to remote code execution.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H