CyberRota Analysis
AI-GeneratedThe ProfilePress (wp-user-avatar) plugin for WordPress versions prior to 4.17.2 is vulnerable to unauthenticated remote code execution, allowing attackers to exploit a weak connect token to install and activate arbitrary plugins. This vulnerability enables attackers to execute PHP code on the server, posing a significant risk to the integrity and security of affected WordPress installations. WordPress site administrators and developers using this plugin should prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to install and activate arbitrary plugins by brute-forcing a weak 32-bit connect token via the ppress_connect_process AJAX handler. Attackers can supply a caller-controlled URL through the file request parameter to trigger silent plugin installation and activation, achieving PHP code execution as the web-server user.