CVE-2024-34444

HIGH

WordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerability

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-34444 has a selected CVSS score of 7.1 (high); EIP currently links 1 repository PoC.

Description

Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · May 28, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 27, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Slider Revolution

Browse ThemePunch OHG / Slider Revolution

Default status: unaffected

CVE ListBefore 6.7.0affected

slider_revolution

Browse themepunch / slider_revolution
VulnCheckVersion data not supplied

Proofs of concept

1

Repository PoCs

GitHubdzmind2312/CVE-2024-34444-Exploit-PocRepository PoCby dzmind23120Scanner2 files

16.9 KiB

GitHub
PoC details
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact is a mass scanner for CVE-2024-34444, a missing authorization vulnerability in the Slider Revolution WordPress plugin. It detects vulnerable installations by extracting a nonce and checking the REST API endpoint, but does not perform exploitation or modification of slider data.

Backdoor review

Backdoor review undetermined

The supplied evidence consists solely of a README.md file describing a scanner for CVE-2024-34444. The actual exploit code (payload withheld) is not included in the reviewable text, making it impossible to determine whether the scanner contains backdoor or deceptive behavior.

ClassificationScanner
Model confidence95%
AuthenticationNot required
LanguagesPython
Target softwareSlider Revolution
Attack typesMissing Authorization
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The README explicitly describes the tool as a 'Professional mass scanner' that 'automates the detection' of vulnerable installations. It outlines a vulnerability chain but states the scanner's purpose is detection, not exploitation. No exploit code is provided in the evidence.

README.md:1README.md:8README.md:14

Requirements

  • Target must be running a vulnerable version (< 6.7.0) of the Slider Revolution WordPress plugin with the REST API endpoint accessible.README.md:14

Observed behavior

  • Extracts a nonce from the frontend to bypass REST API authentication.README.md:26-27
  • Scans single or multiple targets using multi-threading and outputs results to a file.README.md:60-73
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Missing Evidence
Payload withheldThe README references and provides usage instructions for payload withheld, but the file content is not included in the evidence packet. The behavior of the scanner cannot be assessed.README.md:61-73
Review boundaries

What the analysis did not establish

  • Only the README.md file is included; the actual Python script (payload withheld) and other files are omitted, so the scanner's implementation cannot be verified.
  • The evidence packet reports complete_artifact_coverage as false, indicating not all files from the repository are present.
  • Only the README.md file was provided for review. The payload withheld file and any other source files are omitted from the evidence packet.
  • The analysis scope indicates 1 unclassified file (14789 bytes) and 1 text file without content, which likely includes the missing payload withheld.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

References

4