Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2024-13365 — AI Deep Analysis Summary

CVSS 9.8 · Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A critical code flaw in the 'Security & Malware scan by CleanTalk' plugin.…

Q2Root Cause? (CWE/Flaw)

🛡️ **CWE**: CWE-434 (Unrestricted Upload of File with Dangerous Type). 🔍 **Flaw**: The plugin fails to validate files during the upload and extraction of .zip archives. 🚫 No integrity check before execution.

Q3Who is affected? (Versions/Components)

👥 **Vendor**: CleanTalk. 📦 **Product**: Login Security, FireWall, Malware removal by CleanTalk. 📅 **Affected**: Version **2.149 and earlier**. ⚠️ Check your plugin version immediately!

Q4What can hackers do? (Privileges/Data)

💻 **Privileges**: Full Remote Code Execution (RCE). 🔓 **Data**: High impact on Confidentiality, Integrity, and Availability (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).…

Q5Is exploitation threshold high? (Auth/Config)

🔓 **Threshold**: LOW. 🌐 **Auth**: None required (PR:N). 🖱️ **UI**: None required (UI:N). 🚀 **Complexity**: Low (AC:L). This is an easy target for automated bots.

Q6Is there a public Exp? (PoC/Wild Exploitation)

📜 **Public Exp?**: No specific PoC provided in data. 🌍 **Wild Exp**: Likely, given the low barrier to entry (No auth, low complexity). 🕵️‍♂️ Assume it is being exploited in the wild.

Q7How to self-check? (Features/Scanning)

🔍 **Check**: Scan for 'CleanTalk' plugin. 📊 **Version**: Verify if version ≤ 2.149. 🛠️ **Tool**: Use WordPress plugin manager or security scanners. 🚨 Look for unauthorized .zip uploads in logs.

Q8Is it fixed officially? (Patch/Mitigation)

🛠️ **Fix**: Update to the latest version. 📢 **Source**: Refer to WordPress Trac changeset #3229205 for the patch details. ✅ Official fix is available via plugin update.

Q9What if no patch? (Workaround)

🚧 **Workaround**: Disable the plugin if not essential. 🚫 **Block**: Restrict .zip upload permissions in server config. 🛡️ **Monitor**: Watch for suspicious file activity. ⚠️ Temporary measure only.

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: CRITICAL. 🚨 **Priority**: P0. 🏃 **Action**: Patch IMMEDIATELY. With CVSS High severity and no auth required, delay equals risk. 📉 Don't wait!