CVE-2024-10516
Published: 06 December 2024
Summary
CVE-2024-10516 is a high-severity Path Traversal (CWE-22) vulnerability in Wordpress (inferred from references). Its CVSS base score is 8.1 (High).
Operationally, ranked in the top 0.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The Swift Performance Lite plugin for WordPress is vulnerable to local PHP file inclusion in all versions through 2.3.7.1. The flaw exists in the ajaxify function, which accepts an attacker-controlled parameter that can be used to include and execute arbitrary local PHP files on the server.
Unauthenticated remote attackers can exploit the issue over the network by supplying a crafted request to the affected AJAX endpoint. Successful exploitation grants the ability to bypass access controls, read sensitive data, or achieve arbitrary code execution when an attacker can place a PHP file (such as an uploaded image with embedded code) on the target system.
References point to a fix committed in changeset 3201933 of the plugin repository, and the Wordfence advisory confirms the vulnerability was resolved after version 2.3.7.1.
The EPSS score has reached a peak and current value of 0.8779, indicating substantial exploitation interest following disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-33506
Vulnerability details
The Swift Performance Lite plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 2.3.7.1 via the 'ajaxify' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on…
more
the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.