CVE-2024-12848

Description

The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the 'addLibraryByArchive' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible.

PUBLISHED Reserved 2024-12-20 | Published 2025-01-09 | Updated 2025-01-09 | Assigner Wordfence

Problem types

CWE-862 Missing Authorization

Product status

Timeline

Credits

Matthew Rollings finder

Youcef Hamdani finder

References

www.wordfence.com/...-c1aa-4df7-a9f9-1ca5837643e1?source=cve

plugins.trac.wordpress.org/...t-builder/trunk/sktbuilder.php

plugins.trac.wordpress.org/...-builder&sfp_email=&sfph_mail=

plugins.trac.wordpress.org/...-builder&sfp_email=&sfph_mail=

cve.org (CVE-2024-12848)

nvd.nist.gov (CVE-2024-12848)

Download JSON