CVE-2025-23918 — AI Deep Analysis Summary

🚨 **Essence**: Arbitrary File Upload vulnerability in Smallerik File Browser.…

🛡️ **Root Cause**: **CWE-434** (Unrestricted Upload of File with Dangerous Type). The plugin fails to validate file extensions or content types before saving uploads. ⚠️ No sanitization or allow-listing implemented.

📦 **Affected**: **Smallerik File Browser** WordPress Plugin. 📅 **Version**: 1.1 and earlier. 🏢 **Vendor**: Enrico Sandoli. Note: Core WordPress is not directly vulnerable, but the plugin integration is at risk.

🕵️ **Attacker Actions**: Upload PHP/JS shells. 🗝️ **Privileges**: Execute arbitrary code on the server. 📂 **Data**: Read/Write sensitive files, steal user data, or pivot to internal networks.…

🔓 **Threshold**: **Low** for Auth, **High** for Access. Requires **PR:L** (Low Privileges) – meaning the attacker needs a valid WordPress account (even subscriber level). No UI interaction needed (UI:N).…

🧪 **Exploit Status**: No public PoC/Exploit listed in the data (pocs: []). However, the vulnerability type is well-known.…

🔍 **Self-Check**: 1. Scan for `Smallerik File Browser` plugin. 2. Check version <= 1.1. 3. Look for upload endpoints in the plugin. 4. Test if `.php` files can be uploaded via the file browser interface.…

🩹 **Fix Status**: Patch available via vendor/patchstack. 📝 **Action**: Update to the latest version immediately. Check the official WordPress repository or vendor site for the patched release.…

🚧 **No Patch Workaround**: 1. **Disable/Deactivate** the plugin immediately. 2. Restrict file upload permissions in `wp-config.php` if possible. 3. Implement WAF rules to block `.php` uploads. 4.…

🔥 **Urgency**: **HIGH**. CVSS Vector indicates High Impact (C:H, I:H, A:H). Even with PR:L, the ease of exploitation (AC:L) makes it dangerous. 🚀 **Priority**: Patch immediately or disable the plugin to prevent RCE.…