CVE-2024-3962

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-3962
The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppom_upload_file function in all versions up to, and including, 32.0.18. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Successful exploitation requires the PPOM Pro plugin to be installed along with a WooCommerce product that contains a file upload field to retrieve the correct nonce.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://plugins.trac.wordpress.org/changeset/3075669/woocommerce-product-addon Patch
https://themeisle.com/plugins/ppom-pro/ Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/4f95bcc3-354e-4016-9a17-945569b076b6?source=cve Third Party Advisory
https://plugins.trac.wordpress.org/changeset/3075669/woocommerce-product-addon Patch
https://themeisle.com/plugins/ppom-pro/ Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/4f95bcc3-354e-4016-9a17-945569b076b6?source=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:themeisle:product_addons_\&_fields_for_woocommerce:*:*:*:*:*:wordpress:*:*
History

07 Feb 2025, 02:07

Type Values Removed Values Added
First Time Themeisle
Themeisle product Addons \& Fields For Woocommerce
CWE CWE-434
CPE cpe:2.3:a:themeisle:product_addons_\&_fields_for_woocommerce:*:*:*:*:*:wordpress:*:*
References () https://plugins.trac.wordpress.org/changeset/3075669/woocommerce-product-addon - () https://plugins.trac.wordpress.org/changeset/3075669/woocommerce-product-addon - Patch
References () https://themeisle.com/plugins/ppom-pro/ - () https://themeisle.com/plugins/ppom-pro/ - Product
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/4f95bcc3-354e-4016-9a17-945569b076b6?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/4f95bcc3-354e-4016-9a17-945569b076b6?source=cve - Third Party Advisory

21 Nov 2024, 09:30

Type Values Removed Values Added
Summary
  • (es) El complemento Product Addons & Fields for WooCommerce para WordPress es vulnerable a cargas de archivos arbitrarias debido a la falta de validación del tipo de archivo en la función ppom_upload_file en todas las versiones hasta la 32.0.18 incluida. Esto hace posible que atacantes no autenticados carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecución remota de código. La explotación exitosa requiere que se instale el complemento PPOM Pro junto con un producto WooCommerce que contenga un campo de carga de archivos para recuperar el nonce correcto.
References () https://plugins.trac.wordpress.org/changeset/3075669/woocommerce-product-addon - () https://plugins.trac.wordpress.org/changeset/3075669/woocommerce-product-addon -
References () https://themeisle.com/plugins/ppom-pro/ - () https://themeisle.com/plugins/ppom-pro/ -
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/4f95bcc3-354e-4016-9a17-945569b076b6?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/4f95bcc3-354e-4016-9a17-945569b076b6?source=cve -

26 Apr 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-26 09:15

Updated : 2025-02-07 02:07

NVD link : CVE-2024-3962

Mitre link : CVE-2024-3962

CVE.ORG link : CVE-2024-3962

JSON object : View

Products Affected

themeisle

  • product_addons_\&_fields_for_woocommerce
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type