CVE-2021-34624 Scanner

ProfilePress is a WordPress plugin that provides user registration, login, and profile management features. It is commonly used by website administrators and developers to create member-only areas, manage user profiles, and implement social login. The plugin integrates seamlessly with WordPress, offering customizable forms and email notifications. Its popularity stems from its ease of use and comprehensive functionality for building user-centric websites.

The vulnerability CVE-2021-34624 is an Arbitrary File Upload flaw in ProfilePress versions 3.0.0 to 3.1.3. It arises due to insufficient validation of file uploads, allowing unauthenticated users to bypass security checks. This occurs because the plugin fails to properly restrict file types or verify user permissions before processing uploads, enabling attackers to upload malicious files such as PHP shells.

Specifically, the vulnerability exists in the file uploader component of ProfilePress, which handles user-uploaded files during registration or profile updates. The endpoint responsible for processing file uploads does not enforce proper file type restrictions or authentication checks. This allows an attacker to send a crafted request containing a malicious file, which is then stored on the server without validation.

If exploited, an attacker can upload arbitrary files, including executable scripts, leading to remote code execution. This can result in full compromise of the WordPress site, including data theft, defacement, or use of the server for malicious activities. Given the CVSS score of 9.8, this vulnerability poses a critical risk to affected sites.