CVE-2023-5815

Description

The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry) plugin for WordPress is vulnerable to Remote Code Execution via Local File Inclusion in all versions up to, and including, 3.4.1 via the bdp_get_more_post function hooked via a nopriv AJAX. This is due to function utilizing an unsafe extract() method to extract values from the POST variable and passing that input to the include() function. This makes it possible for unauthenticated attackers to include arbitrary PHP files and achieve remote code execution. On vulnerable Docker configurations it may be possible for an attacker to create a PHP file and then subsequently include it to achieve RCE.

8.1

CVSS

Severity: High

CVSS 3.1 •

EPSS 32.65% Top 5%

Third-Party Advisory wordfence.com

Affected: infornweb News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry)

References

Link	Tags
https://www.wordfence.com/threat-intel/vulnerabilities/id/2f2bdf11-401a-48af-b1dc-aeeb40b9a384?source=cve	third party advisory
https://wordpress.org/plugins/blog-designer-pack/	product
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2984052%40blog-designer-pack&new=2984052%40blog-designer-pack&sfp_email=&sfph_mail=	patch
https://www.leavesongs.com/PENETRATION/docker-php-include-getshell.html#0x06-pearcmdphp	not applicable

Frequently Asked Questions

What is the severity of CVE-2023-5815?: CVE-2023-5815 has been scored as a high severity vulnerability.
How to fix CVE-2023-5815?: To fix CVE-2023-5815, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-5815 being actively exploited in the wild?: It is possible that CVE-2023-5815 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~33% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-5815?: CVE-2023-5815 affects infornweb News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry).