Horizon Alert
Summary of the vulnerability and why it matters
A critical vulnerability in the ProSolution WP Client WordPress plugin allows unauthenticated attackers to upload malicious files. This could lead to the execution of arbitrary code on the affected website, compromising its integrity and the data it handles.
- Websites can be taken over.
- Sensitive data may be exposed.
- System access can be gained.
Attack Path
How an attacker could exploit the issue
An unauthenticated attacker can upload a malicious PHP file to a WordPress site running the ProSolution WP Client plugin. By submitting a valid first file in an upload request, followed by a PHP web shell, the attacker can bypass validation checks and gain remote code execution on the server.
- Unauthenticated access required.
- Targets file upload functionality.
- Relies on flawed file validation.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability allows unauthenticated attackers to upload arbitrary files, including malicious PHP scripts, to a web-accessible directory. The flawed validation logic means that even if the first file appears legitimate, subsequent files in the same upload can be malicious, leading to remote code execution. Attackers favor such vulnerabilities because they offer a direct path to compromise a server with minimal effort and no prior access.
- Unauthenticated RCE opportunity.
- Direct web shell upload.
- Exploitation likely on public sites.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Prioritize blocking or isolating any WordPress sites using the ProSolution WP Client plugin version 2.0.0 or earlier, as unauthenticated attackers can upload malicious PHP files for remote code execution. Given the critical severity and network-accessible attack vector, immediate containment is essential until a patch can be applied.
- Block all inbound traffic to the plugin.
- If patching is not immediate, disable plugin functionality.
- Monitor for suspicious file uploads or execution.
