Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2016-10954: Unrestricted Upload/RCE in Neosense theme 1.7

The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload.

CVE
#vulnerability#wordpress#php#rce#auth

Vulnerability

Neosense is a WordPress theme by dynamicpress.

Neosense theme version 1.7 contains an unrestricted file upload vulnerability.

Version 1.7 (and possibly earlier) includes in its theme directory a copy of the “qquploader” ajax file uploader, which does not verify user authorization. Using this uploader, an attacker can upload any file to the site. The uploaded file is placed in the wp-content/uploads/YYYY/mm directory, which is normally writable.

The vulnerability can be used to achieve remote code execution by uploading a PHP script with extension .php or .phtml.

Fix

The vulnerability was fixed in Neosense theme 1.8 by switching to WordPress core functions for file uploads.

Timeline

  • 12 Aug: Vulnerability submitted to dynamicpress
  • 16 Aug: Response by dynamicpress
  • 29 Aug: Neosense theme 1.8 released by dynamicpress
  • 19 Sep: Vulnerability published

Credits

The vulnerability was found by Walter Hop, Slik BV, The Netherlands.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907