WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload
70Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 9.8epss 0.5%
from disclosure to weapon114 days
Published on NVDNov 19
1st PoC+114d
VulnCheck+6d
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
The WavePlayer WordPress plugin before 3.8.0 does not have authorization in an AJAX action as well as does not validate the file to be copied locally, allowing unauthenticated users to upload arbitrary file on the server and lead to RCE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Unknown · WavePlayerpublic PoCs found — 1
vulncheckvulncheck.com/xdb/b03a7dfdc66cunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.