WPvivid Backup & Migration’s import upload handler (AJAX action wpvivid_upload_import_files) saved the uploaded file with WordPress’s file-type check turned off and validated only a separate ‘name’ field, so an administrator account could place a file with any extension, including a PHP script, in the plugin’s import directory under wp-content. Where that directory is not protected by Apache mod_rewrite (for example on nginx), the file can be executed as code. Fixed in 0.9.137, which accepts only properly named ZIP files, enforces WordPress’s type check, validates chunk numbers and refuses symlinked targets.

This vulnerability affects the following application versions:

  • WPvivid — Backup, Migration & Staging 0.9.28
  • WPvivid — Backup, Migration & Staging 0.9.29
  • WPvivid — Backup, Migration & Staging 0.9.30
  • WPvivid — Backup, Migration & Staging 0.9.31
  • WPvivid — Backup, Migration & Staging 0.9.32
  • WPvivid — Backup, Migration & Staging 0.9.33
  • WPvivid — Backup, Migration & Staging 0.9.34
  • WPvivid — Backup, Migration & Staging 0.9.35
  • WPvivid — Backup, Migration & Staging 0.9.36
  • WPvivid — Backup, Migration & Staging 0.9.37
  • WPvivid — Backup, Migration & Staging 0.9.38
  • WPvivid — Backup, Migration & Staging 0.9.39
  • WPvivid — Backup, Migration & Staging 0.9.40
  • WPvivid — Backup, Migration & Staging 0.9.41
  • WPvivid — Backup, Migration & Staging 0.9.42
  • WPvivid — Backup, Migration & Staging 0.9.43
  • WPvivid — Backup, Migration & Staging 0.9.44
  • WPvivid — Backup, Migration & Staging 0.9.45
  • WPvivid — Backup, Migration & Staging 0.9.46
  • WPvivid — Backup, Migration & Staging 0.9.47
  • WPvivid — Backup, Migration & Staging 0.9.48
  • WPvivid — Backup, Migration & Staging 0.9.49
  • WPvivid — Backup, Migration & Staging 0.9.50
  • WPvivid — Backup, Migration & Staging 0.9.51
  • WPvivid — Backup, Migration & Staging 0.9.52
  • WPvivid — Backup, Migration & Staging 0.9.53
  • WPvivid — Backup, Migration & Staging 0.9.54
  • WPvivid — Backup, Migration & Staging 0.9.55
  • WPvivid — Backup, Migration & Staging 0.9.56
  • WPvivid — Backup, Migration & Staging 0.9.57
  • WPvivid — Backup, Migration & Staging 0.9.58
  • WPvivid — Backup, Migration & Staging 0.9.59
  • WPvivid — Backup, Migration & Staging 0.9.60
  • WPvivid — Backup, Migration & Staging 0.9.61
  • WPvivid — Backup, Migration & Staging 0.9.62
  • WPvivid — Backup, Migration & Staging 0.9.63
  • WPvivid — Backup, Migration & Staging 0.9.64
  • WPvivid — Backup, Migration & Staging 0.9.65
  • WPvivid — Backup, Migration & Staging 0.9.66
  • WPvivid — Backup, Migration & Staging 0.9.67
  • WPvivid — Backup, Migration & Staging 0.9.68
  • WPvivid — Backup, Migration & Staging 0.9.69
  • WPvivid — Backup, Migration & Staging 0.9.70
  • WPvivid — Backup, Migration & Staging 0.9.71
  • WPvivid — Backup, Migration & Staging 0.9.72
  • WPvivid — Backup, Migration & Staging 0.9.73
  • WPvivid — Backup, Migration & Staging 0.9.74
  • WPvivid — Backup, Migration & Staging 0.9.75
  • WPvivid — Backup, Migration & Staging 0.9.76
  • WPvivid — Backup, Migration & Staging 0.9.77
  • WPvivid — Backup, Migration & Staging 0.9.78
  • WPvivid — Backup, Migration & Staging 0.9.79
  • WPvivid — Backup, Migration & Staging 0.9.80
  • WPvivid — Backup, Migration & Staging 0.9.81
  • WPvivid — Backup, Migration & Staging 0.9.82
  • WPvivid — Backup, Migration & Staging 0.9.83
  • WPvivid — Backup, Migration & Staging 0.9.84
  • WPvivid — Backup, Migration & Staging 0.9.85
  • WPvivid — Backup, Migration & Staging 0.9.86
  • WPvivid — Backup, Migration & Staging 0.9.87
  • WPvivid — Backup, Migration & Staging 0.9.88
  • WPvivid — Backup, Migration & Staging 0.9.89
  • WPvivid — Backup, Migration & Staging 0.9.90
  • WPvivid — Backup, Migration & Staging 0.9.91
  • WPvivid — Backup, Migration & Staging 0.9.92
  • WPvivid — Backup, Migration & Staging 0.9.93
  • WPvivid — Backup, Migration & Staging 0.9.94
  • WPvivid — Backup, Migration & Staging 0.9.95
  • WPvivid — Backup, Migration & Staging 0.9.96
  • WPvivid — Backup, Migration & Staging 0.9.97
  • WPvivid — Backup, Migration & Staging 0.9.98
  • WPvivid — Backup, Migration & Staging 0.9.99
  • WPvivid — Backup, Migration & Staging 0.9.100
  • WPvivid — Backup, Migration & Staging 0.9.101
  • WPvivid — Backup, Migration & Staging 0.9.102
  • WPvivid — Backup, Migration & Staging 0.9.103
  • WPvivid — Backup, Migration & Staging 0.9.104
  • WPvivid — Backup, Migration & Staging 0.9.105
  • WPvivid — Backup, Migration & Staging 0.9.106
  • WPvivid — Backup, Migration & Staging 0.9.107
  • WPvivid — Backup, Migration & Staging 0.9.108
  • WPvivid — Backup, Migration & Staging 0.9.109
  • WPvivid — Backup, Migration & Staging 0.9.110
  • WPvivid — Backup, Migration & Staging 0.9.111
  • WPvivid — Backup, Migration & Staging 0.9.112
  • WPvivid — Backup, Migration & Staging 0.9.113
  • WPvivid — Backup, Migration & Staging 0.9.114
  • WPvivid — Backup, Migration & Staging 0.9.115
  • WPvivid — Backup, Migration & Staging 0.9.116
  • WPvivid — Backup, Migration & Staging 0.9.117
  • WPvivid — Backup, Migration & Staging 0.9.118
  • WPvivid — Backup, Migration & Staging 0.9.119
  • WPvivid — Backup, Migration & Staging 0.9.120
  • WPvivid — Backup, Migration & Staging 0.9.121
  • WPvivid — Backup, Migration & Staging 0.9.122
  • WPvivid — Backup, Migration & Staging 0.9.123
  • WPvivid — Backup, Migration & Staging 0.9.124
  • WPvivid — Backup, Migration & Staging 0.9.125
  • WPvivid — Backup, Migration & Staging 0.9.126
  • WPvivid — Backup, Migration & Staging 0.9.127
  • WPvivid — Backup, Migration & Staging 0.9.128
  • WPvivid — Backup, Migration & Staging 0.9.129
  • WPvivid — Backup, Migration & Staging 0.9.130
  • WPvivid — Backup, Migration & Staging 0.9.131
  • WPvivid — Backup, Migration & Staging 0.9.132
  • WPvivid — Backup, Migration & Staging 0.9.133
  • WPvivid — Backup, Migration & Staging 0.9.134
  • WPvivid — Backup, Migration & Staging 0.9.136

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *