Vulnerability Description
The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.09. This is due to insufficient controls on file paths being supplied to the 'mla_stream_file' parameter from the ~/includes/mla-stream-image.php file, where images are processed via Imagick(). This makes it possible for unauthenticated attackers to supply files via FTP that will make directory lists, local file inclusion, and remote code execution possible.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Davidlingren | Media Library Assistant | < 3.10 |
Related Weaknesses (CWE)
References
- https://github.com/Patrowl/CVE-2023-4634/ExploitThird Party Advisory
- https://packetstormsecurity.com/files/174508/wpmla309-lfiexec.tgzThird Party AdvisoryVDB Entry
- https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/ExploitThird Party Advisory
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&oldPatch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3aThird Party Advisory
- https://github.com/Patrowl/CVE-2023-4634/ExploitThird Party Advisory
- https://packetstormsecurity.com/files/174508/wpmla309-lfiexec.tgzThird Party AdvisoryVDB Entry
- https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/ExploitThird Party Advisory
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&oldPatch
- https://www.wordfence.com/threat-intel/vulnerabilities/id/05c68377-feb6-442d-a3aThird Party Advisory
FAQ
What is CVE-2023-4634?
CVE-2023-4634 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.09. This is due to insufficient controls on file pa...
How severe is CVE-2023-4634?
CVE-2023-4634 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-4634?
Check the references section above for vendor advisories and patch information. Affected products include: Davidlingren Media Library Assistant.