CVE-2019-8943
CVE-2019-8943
Vexday Risk Score
62High priority
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Popular PoC on GitHub (24 stars) — exploitation code widely available.
CVSS —EPSS 92.0%KEV nãoPoC públicaNuclei simMetasploit simPatch —
Lifecycle
19 Feb 2019Metasploit module available
20 Feb 2019Published on NVD
01 Mar 2019Public PoC
Weaponization speed
9 daysto first PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring.
Affected products
n/a · n/apublic PoCs found — 8
githubgithub.com/oussama-rahali/CVE-2019-8943★ 24githubgithub.com/hadrian3689/wordpress_cropimage★ 3cve_referencewww.exploit-db.com/exploits/46511/unverifiedcve_referencewww.exploit-db.com/exploits/46662/unverifiedexploitdbwww.exploit-db.com/exploits/46662unverifiedcve_referencepacketstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.htmlunverifiedexploitdbwww.exploit-db.com/exploits/46511unverifiedcve_referencepacketstormsecurity.com/files/161213/WordPress-5.0.0-Remote-Code-Execution.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.htmlhttp://packetstormsecurity.com/files/161213/WordPress-5.0.0-Remote-Code-Execution.htmlhttps://blog.ripstech.com/2019/wordpress-image-remote-code-execution/https://www.exploit-db.com/exploits/46511/https://www.exploit-db.com/exploits/46662/http://www.rapid7.com/db/modules/exploit/multi/http/wp_crop_rcehttp://www.securityfocus.com/bid/107089