CVE-2020-36847 — AI Deep Analysis Summary

🚨 **Essence**: A critical code flaw in the WordPress plugin **Simple-File-List**. 📉 **Consequences**: Attackers can rename uploaded PHP files from `.png` to `.php`, leading to **Remote Code Execution (RCE)**.…

🛡️ **Root Cause**: **CWE-434** (Arbitrary Upload). 🐛 **Flaw**: The `rename` function is misused. It allows changing the extension of uploaded files, bypassing security checks.…

👥 **Affected**: Users of **Simple File List** plugin. 📦 **Version**: **4.2.2** and earlier. 🏢 **Vendor**: eemitch. ⚠️ If you use this plugin, you are at risk.

🕵️ **Hackers Can**: Execute arbitrary PHP code on the server. 🔓 **Privileges**: Full control over the web server. 📂 **Data**: Access, modify, or delete any data. 🌐 The entire WordPress site can be taken over.

📊 **Threshold**: **LOW**. 🚫 **Auth**: No authentication required (PR:N). 🖱️ **UI**: No user interaction needed (UI:N). 🌍 **Network**: Remote access (AV:N). 🚀 Extremely easy to exploit.

💥 **Public Exp?**: **YES**. 📂 **PoC Available**: Multiple Proof-of-Concept scripts exist on GitHub (e.g., `137f/PoC-CVE-2020-36847`). 🛠️ Ready-to-use exploits are circulating. ⚠️ High risk of automated attacks.

🔍 **Self-Check**: Scan for **Simple File List** plugin. 📋 **Version Check**: Is version ≤ 4.2.2? 📤 **Upload Test**: Try uploading a PHP file disguised as a PNG. 🚩 If it renames to `.php`, you are vulnerable.

🔧 **Fixed?**: **YES**. 📥 **Patch**: Update the plugin to the latest version. 📝 **Reference**: WordPress Trac changeset `2286920`. 🔄 Immediate update is the primary fix.

🚧 **No Patch?**: Disable the plugin immediately. 🚫 **Remove**: Uninstall if not needed. 🛡️ **WAF**: Use a Web Application Firewall to block PHP uploads. 📂 **Restrict**: Block `.php` execution in upload directories.

🔥 **Urgency**: **CRITICAL**. 🚨 **Priority**: **P0 (Immediate Action)**. ⏳ **Time**: Exploits are public. 🛑 Delay increases risk of breach. 🏃‍♂️ Patch NOW.