CVE-2024-3806
CRITICAL EXPLOITED RANSOMWAREPorto theme for WordPress <7.1.0 - Local File Inclusion
Title source: llmExploitation Summary
CVE-2024-3806 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns. EIP tracks 1 public exploit from researchers including RandomRobbieBF.
AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2024-3806, demonstrating an unauthenticated Local File Inclusion (LFI) vulnerability in the Porto WordPress theme via the 'porto_ajax_posts' function. The PoC includes a crafted HTTP POST request that attempts to include the 'wp-config.php' file, though it currently results in a 500 error.
Description
The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included.
Exploits (1)
This repository contains a functional proof-of-concept for CVE-2024-3806, demonstrating an unauthenticated Local File Inclusion (LFI) vulnerability in the Porto WordPress theme via the 'porto_ajax_posts' function. The PoC includes a crafted HTTP POST request that attempts to include the 'wp-config.php' file, though it currently results in a 500 error.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H