CVE-2018-12426
published 2018-07-02CVE-2018-12426: The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed…
PriorityP259critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
5.06%
91.2th percentile
The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/remote_upload request with a .php filename and the image/jpeg content type.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| 3cx | live_chat | < 8.0.07 | 8.0.07 |
| 3cx | live_chat | < 8.0.26 | 8.0.26 |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wfph-5jh4-c99x: The WP Live Chat Support Pro plugin through 8
ghsa_unreviewed·2022-05-24·CVSS 9.8
CVE-2019-11185 [CRITICAL] CWE-434 GHSA-wfph-5jh4-c99x: The WP Live Chat Support Pro plugin through 8
The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This results from an incomplete patch for CVE-2018-12426. Arbitrary file upload is achieved by using a non-blacklisted executable file extension in conjunction with a whitelisted file extension, and prepending "magic bytes" to the payload to pass MIME checks. Specifically, an unauthenticated remote user submits a crafted file upload POST request to the REST api remote_upload endpoint. The file contains data that will fool the plugin's MIME check into classifying it as an image (which is a whitelisted file extension) and finally a trailing .phtml file extension.
GHSA
GHSA-rm79-mfx6-crmj: The WP Live Chat Support Pro plugin before 8
ghsa_unreviewed·2022-05-13
CVE-2018-12426 [CRITICAL] CWE-434 GHSA-rm79-mfx6-crmj: The WP Live Chat Support Pro plugin before 8
The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/remote_upload request with a .php filename and the image/jpeg content type.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/CodeCabin/wp-live-chat-support/blob/master/readme.txthttps://github.com/RiieCco/write-ups/tree/master/CVE-2018-12426https://wpvulndb.com/vulnerabilities/9697https://github.com/CodeCabin/wp-live-chat-support/blob/master/readme.txthttps://github.com/RiieCco/write-ups/tree/master/CVE-2018-12426https://wpvulndb.com/vulnerabilities/9697
2018-07-02
Published