CVE-2021-3120Yith Woocommerce Gift Cards Unrestricted File Upload
An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server.
Published Feb 22, 2021 · Updated Nov 21, 2024 · Also known as 2b6489f8-061d-4fbd-81f2-9f508dd0e7f8, WORDFENCE-2b6489f8-061d-4fbd-81f2-9f508dd0e7f8
Key Facts
Patch in the next maintenance window- CVE-2021-3120 is a critical-severity vulnerability (CVSS 9.8 v3.1) affecting Yith Woocommerce Gift Cards (Yithemes), yith-woocommerce-gift-cards-premium (wordpress-plugin).
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 37% probability of exploitation in the next 30 days.
- Fixed versions are available, including yith-woocommerce-gift-cards-premium 3.3.1, Yith Woocommerce Gift Cards 3.3.1.
- Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Scores
CVSS v3.1
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
37%
Higher than 98.4% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
44/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Attributed actors
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
1
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisoryhttps://www.wordfence.com/threat-intel/vulnerabilities/id/2b6489f8-061d-4fbd-81f2-9f508dd0e7f8?source=api-prod
- advisoryhttps://www.wordfence.com/threat-intel/vulnerabilities/id/2b6489f8-061d-4fbd-81f2-9f508dd0e7f8?source=api-scan
- advisoryhttps://yithemes.com/themes/plugins/yith-woocommerce-gift-cards/
Description
An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must be able to place a valid Gift Card product into the shopping cart.
An uploaded file is placed at a predetermined path on the web server with a user-specified filename and extension. This occurs because the ywgc-upload-picture parameter can have a .php value even though the intention was to only allow uploads of Gift Card images.
Affected Products
2 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Yith Woocommerce Gift CardsYithemes | See advisory | 3.3.1 |
| yith-woocommerce-gift-cards-premiumwordpress-plugin | See advisory | 3.3.1 |
Patched Releases
yith-woocommerce-gift-cards-premium
3.3.1
Yith Woocommerce Gift Cards
3.3.1
Timeline
Publicly disclosed
Feb 22, 2021
Last updated
Nov 21, 2024
Weakness Type
- CWE-434 Unrestricted Upload of File with Dangerous Type
FAQ
Common Questions.
An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server.
Affected: Yith Woocommerce Gift Cards (Yithemes); yith-woocommerce-gift-cards-premium (wordpress-plugin). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including yith-woocommerce-gift-cards-premium 3.3.1, Yith Woocommerce Gift Cards 3.3.1.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Is CVE-2021-3120 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo