This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis β
Q1What is this vulnerability? (Essence + Consequences)
π¨ **Essence**: Unrestricted file upload in Cooked Pro. π₯ **Consequences**: Attackers can upload malicious files (e.g., webshells). This leads to full server compromise, data theft, and site defacement.β¦
π‘οΈ **Root Cause**: CWE-434 (Unrestricted Upload of File with Dangerous Type). The plugin fails to validate file types or extensions before saving them to the server. It trusts user input blindly.
Q3Who is affected? (Versions/Components)
π¦ **Affected**: WordPress Plugin **Cooked Pro**. π **Version**: Before **1.8.0**. π’ **Vendor**: Gora Tech LLC. Any site running older versions is at risk.
Q4What can hackers do? (Privileges/Data)
π **Capabilities**: Upload arbitrary files. π **Data Access**: Read/Write server files. π» **Privileges**: Execute code via uploaded scripts (e.g., PHP shells). Full remote code execution potential.
Q5Is exploitation threshold high? (Auth/Config)
β‘ **Threshold**: LOW. π **Auth**: Unauthenticated (PR:N). π±οΈ **UI**: No user interaction needed (UI:N). π **Network**: Remote (AV:N). Easy to exploit from anywhere.
Q6Is there a public Exp? (PoC/Wild Exploitation)
π **Exploit Status**: Public references exist (Patchstack). While specific PoC code isn't listed in the JSON, the vulnerability is well-documented. Wild exploitation is likely given the low barrier.
Q7How to self-check? (Features/Scanning)
π **Self-Check**: Scan for **Cooked Pro** plugin. Check version number. If < 1.8.0, you are vulnerable. Look for suspicious file uploads in the plugin's upload directory.
π§ **No Patch?**: Disable the plugin immediately. π Remove file upload capabilities if possible. 𧱠Use WAF rules to block uploads of executable extensions (.php, .exe). Monitor server logs closely.
Q10Is it urgent? (Priority Suggestion)
π₯ **Urgency**: CRITICAL. CVSS Score is High (9.8 implied by vector). Unauthenticated RCE risk. Patch immediately to prevent server takeover. Do not delay.