Arbitrary File Upload in Gerador de Certificados Plugin Enables RCE

Executive Summary

The Gerador de Certificados – DevApps plugin for WordPress has a vulnerability due to missing file type validation in its moveUploadedFile() function in all versions up to and including 1.3.6.

This flaw allows authenticated attackers with Administrator-level access or higher to upload arbitrary files to the affected site's server.

Because the plugin does not properly check the type of files being uploaded, attackers can potentially upload malicious files.

Useful 0 Not Useful 0

Impact Analysis

An attacker with Administrator-level access can exploit this vulnerability to upload arbitrary files, which may lead to remote code execution on the affected server.

This can compromise the security and integrity of the website and its underlying server, potentially allowing attackers to take control, steal data, or disrupt services.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows authenticated attackers with Administrator-level access to upload arbitrary files, potentially leading to remote code execution on the affected server.

Such unauthorized file uploads and possible remote code execution can compromise the confidentiality, integrity, and availability of data, which are critical aspects of compliance with standards like GDPR and HIPAA.

Therefore, exploitation of this vulnerability could lead to violations of these regulations due to potential unauthorized access or data breaches.

Useful 0 Not Useful 0