CVE-2023-6559
Published: 16 December 2023
Summary
CVE-2023-6559 is a high-severity Path Traversal (CWE-22) vulnerability in Web-Soudan Mw Wp Form. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 9.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to and including 5.0.3. The issue stems from insufficient validation of file paths supplied during deletion operations, allowing path traversal that matches CWE-22. The vulnerability received a CVSS 3.1 score of 7.5 reflecting network attack vector, low complexity, and no required authentication or user interaction.
Unauthenticated attackers can supply crafted paths to delete arbitrary files on the server, including the wp-config.php file. Successful exploitation can disable the site, expose database credentials, and enable site takeover or remote code execution.
Public references point to a patched changeset in the WordPress plugin repository and a detailed advisory from Wordfence that identify the affected versions and recommend updating to a fixed release. The EPSS score has remained flat at 0.0609 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-58788
Vulnerability details
The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it.…
more
This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.