Social Discussions <= 6.1.1 - Remote File Inclusion and Full Path Disclosure
Strategic Overview
<= 6.1.1N/AVulnerability Overview
The Social Discussions plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 6.1.1 via the HTTP_ENV_VARS parameter. This allows unauthenticated attackers to include remote files on the server, resulting in code execution. The plugin is also vulnerable to Full Path Disclosure via direct requests to several .php files.
Technical Analysis
REMEDIATION: Update to version 6.1.2, or a newer patched version --- IDENTIFIER: CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')) The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in require, include, or similar functions.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C