CVE-2024-9047 — AI Deep Analysis Summary

🚨 **Essence**: Critical Path Traversal in 'WordPress File Upload' plugin. 📉 **Consequences**: Attackers can read or delete files **outside** the intended directory.…

🛡️ **Root Cause**: CWE-22 (Path Traversal). 🐛 **Flaw**: The `wfu_file_downloader.php` file fails to sanitize user input, allowing directory traversal sequences to escape the target folder.

🏢 **Vendor**: nickboss. 📦 **Product**: Iptanus File Upload (WordPress File Upload). 📅 **Affected**: Versions **4.24.11 and earlier**. ⚠️ **Note**: Exploitation requires **PHP 7.4 or earlier**.

🕵️ **Actions**: Arbitrary file read & delete. 🔓 **Privileges**: Unauthenticated access (No login needed). 💾 **Data**: Sensitive server files, config files, or source code outside the upload directory.

📉 **Threshold**: LOW. 🚫 **Auth**: None required (Unauthenticated). 🌐 **Vector**: Network (Remote). 🎯 **Ease**: High (CVSS 9.8 Critical).

🔥 **Yes**: Multiple public PoCs/Exploits available on GitHub. 📜 **Examples**: `iSee857`, `verylazytech`, `Nxploited`. 🐍 **Tools**: Python scripts for batch/single detection are circulating.

🔍 **Check**: Use provided PoC scripts (e.g., `python poc.py -u your-ip`). 📡 **Scan**: Look for `wfu_file_downloader.php` endpoint. 📋 **Verify**: Check plugin version <= 4.24.11 and PHP version <= 7.4.

🛠️ **Fix**: Update plugin to version **> 4.24.11**. 📢 **Source**: WordPress Trac changeset 3164449. 🔄 **Action**: Immediate upgrade recommended by vendor.

🚧 **Workaround**: If patching is delayed, **disable the plugin** immediately. 🛑 **Block**: Restrict access to `wfu_file_downloader.php` via WAF or server config.…

🔴 **Priority**: CRITICAL / URGENT. 🚨 **Reason**: CVSS 9.8, Unauthenticated, Public Exploits. ⏳ **Action**: Patch **NOW**. Do not wait. High risk of active exploitation in the wild.