Arbitrary File Read in UnderConstructionPage PRO WordPress Plugin

Executive Summary

The UnderConstructionPage PRO plugin for WordPress has a vulnerability known as Arbitrary File Read in all versions up to and including 5.76.

This vulnerability occurs because the plugin accepts arbitrary local file paths through the template_thumbnail parameter and copies their contents into a publicly accessible uploads file.

As a result, authenticated attackers with Subscriber-level access or higher can read arbitrary files on the server, potentially exposing sensitive information.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers with low-level authenticated access (Subscriber-level and above) to read arbitrary files on the server.

The attacker could access sensitive information stored in these files, which might include configuration files, credentials, or other private data.

Such unauthorized access can lead to information disclosure, increasing the risk of further attacks or data breaches.

Useful 0 Not Useful 0

Mitigation Strategies

The vulnerability exists in all versions of the UnderConstructionPage PRO plugin up to and including 5.76. To mitigate this vulnerability, you should update the plugin to a version later than 5.76 where this issue is fixed.

Additionally, restrict Subscriber-level users from accessing or manipulating the template_thumbnail parameter if possible, and monitor your uploads directory for unexpected file contents that could indicate exploitation.

Useful 0 Not Useful 0