CyberRota Analysis
AI-GeneratedThe ShopLentor plugin for WordPress is vulnerable to arbitrary function execution due to improper handling of user input in the REST API endpoint, allowing authenticated attackers with Administrator-level access to execute arbitrary PHP functions. This vulnerability poses a significant risk as it can lead to unauthorized actions on the affected WordPress sites. WordPress site administrators using the ShopLentor plugin should prioritize applying updates or implementing mitigations to safeguard against potential exploitation.
Original NVD Description
The ShopLentor plugin for WordPress is vulnerable to arbitrary function execution via the woolentoropt/v1/custom-action REST API endpoint in all versions up to, and including, 3.3.7. This is due to the handle_action() method passing user-supplied input directly to call_user_func() without an allowlist of permitted callbacks. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute arbitrary PHP callable functions via the 'callback' parameter.