The Administrative Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.3.4 via the 'slug' attribute of the 'get_template' shortcode. This is due to insufficient path validation on user-supplied input passed to the get_template_part() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other "safe" file types can be uploaded and included.
The Administrative Shortcodes WordPress plugin versions up to 0.3.4 contain a Local File Inclusion vulnerability in the 'get_template' shortcode that allows authenticated contributors to include and execute arbitrary files. Attackers can leverage this to execute PHP code, bypass access controls, and access sensitive data on affected servers.
تحتوي إضافة Administrative Shortcodes لـ WordPress على ثغرة في التحقق من صحة المسارات في اختصار get_template تسمح للمهاجمين المصرحين بمستوى المساهم بتضمين وتنفيذ ملفات عشوائية. يمكن استخدام هذه الثغرة لتنفيذ أكواد PHP وتجاوز عناصر التحكم في الوصول والوصول إلى البيانات الحساسة.
The Administrative Shortcodes WordPress plugin versions up to 0.3.4 contain a Local File Inclusion vulnerability in the 'get_template' shortcode that allows authenticated contributors to include and execute arbitrary files. Attackers can leverage this to execute PHP code, bypass access controls, and access sensitive data on affected servers.
Update the Administrative Shortcodes plugin to version 0.3.5 or later immediately. If immediate patching is not possible, restrict Contributor-level access to trusted users only, disable the plugin, or implement Web Application Firewall rules to block malicious shortcode usage patterns.
قم بتحديث إضافة Administrative Shortcodes إلى الإصدار 0.3.5 أو أحدث فوراً. إذا لم يكن التحديث ممكناً، قيّد وصول مستوى المساهم للمستخدمين الموثوقين فقط، أو عطّل الإضافة، أو طبّق قواعد جدار الحماية لتطبيقات الويب لحظر أنماط الاختصارات الضارة.