Published: 06/09/2023 Updated: 07/11/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.09. This is due to insufficient controls on file paths being supplied to the 'mla_stream_file' parameter from the ~/includes/mla-stream-image.php file, where images are processed via Imagick(). This makes it possible for unauthenticated malicious users to supply files via FTP that will make directory lists, local file inclusion, and remote code execution possible.

Vulnerable Product	Search on Vulmon	Subscribe to Product
davidlingren media library assistant

Check Point Reference: CPAI-2023-1158 Date Published: 24 Jan 2024 Severity: Critical ...

ProjetCL Tuto CVE-2023-4634 Cloner le dépôt Git Pour commencer, clonez le dépôt Git à l'aide de la commande suivante : git clone githubcom/lehazare/ProjetCLgit Construction et exécution du conteneur WordPress Pour exécuter le conteneur WordPress, utilisez la commande suivante :

CVE-2023-4634

CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library Plugin < 310 (CVE-2023-4634) Info Patrowl discovered An unauthenticated RCE Vulnerability on Media-Librairy-Assistant Wordpress Plugin in version < 310 The exploit is not trivial and requires just a little setup explained bellow Global discover and exploitaiton of the exploit could be found in our bl

https://packetstormsecurity.com/files/174508/wpmla309-lfiexec.tgz https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2955933%40media-library-assistant&new=2955933%40media-library-assistant&sfp_email=&sfph_mail=#file4 https://github.com/Patrowl/CVE-2023-4634/https://www.wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3a0-1fbc246c7cbf?source=cve https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/https://nvd.nist.gov https://github.com/lehazare/ProjetCL https://github.com/Patrowl/CVE-2023-4634 https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2023-1158.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-4634

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect