漏洞描述
WordPress Backup Guard plugin before 1.6.0 is susceptible to authenticated arbitrary file upload. The plugin does not ensure that imported files are in SGBP format and extension, allowing high-privilege users to upload arbitrary files, including PHP, possibly leading to remote code execution.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/d442acac-4394-45e4-b6bb-adf4a40960fb↗wordpress.orghttps://wordpress.org/plugins/backup/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-24155↗packetstormsecurity.comhttp://packetstormsecurity.com/files/163382/WordPress-Backup-Guard-1.5.8-Shell-Upload.html↗github.comhttps://github.com/0dayNinja/CVE-2021-24155.rb↗