CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-12849

Critical Severity
SVRS
71/100
CVSSv3
7.5/10
EPSS
0.88723/1

CVE-2024-12849: Arbitrary File Read vulnerability in WordPress Error Log Viewer plugin. Unauthenticated users can read sensitive server files.

The CVE-2024-12849 details an Arbitrary File Read vulnerability affecting the Error Log Viewer By WP Guru plugin for WordPress, versions 1.0.1.3 and earlier. This flaw allows unauthenticated attackers to exploit the wp_ajax_nopriv_elvwp_log_download AJAX action, granting them the ability to read any file on the server. With a SOCRadar Vulnerability Risk Score (SVRS) of 71, while not critical, this vulnerability still presents a significant risk, especially because exploits are actively available and have been observed "In The Wild". Successfully exploiting this vulnerability could lead to the exposure of sensitive data such as configuration files, database credentials, or user information. Immediate action is advised to mitigate potential risks associated with this vulnerability, prioritizing patching or disabling the plugin.

TAGS
In The Wild
Exploit Avaliable
VECTOR STRING
CVSS:3.1
AV:N
AC:L
PR:N
UI:N
S:U
C:H
I:N
A:N
PUBLICATION DATE2025-01-07
LAST MODIFIED2025-01-07
Eye Icon
SOCRadar
AI Insight

Description

CVE-2024-12849 affects the Error Log Viewer By WP Guru plugin for WordPress, allowing unauthenticated attackers to read arbitrary files on the server due to a vulnerability in the wp_ajax_nopriv_elvwp_log_download AJAX action. This vulnerability is classified as CWE-22 (Improper Input Validation) and has an SVRS score of 30. While the CVSS score is 7.5, indicating a high severity, the SVRS score reflects the less urgent nature of the vulnerability.

Key Insights

  • Unauthenticated Access: The vulnerability allows attackers to read files without requiring any login credentials, making it accessible to anyone.
  • Arbitrary File Read: Attackers can read any file on the server, including potentially sensitive data like configuration files, databases, or source code.
  • Exploit Availability: Active exploits have been published for this vulnerability, making it easy for attackers to exploit.
  • In The Wild: This vulnerability is being actively exploited by hackers in the wild.

Mitigation Strategies

  • Update the Plugin: Immediately update the Error Log Viewer By WP Guru plugin to the latest version (1.0.1.4 or later) to patch the vulnerability.
  • Disable the Plugin: If updating is not immediately possible, disable the plugin to prevent exploitation.
  • Restrict File Access: Implement file access controls to limit the ability of attackers to read sensitive files.
  • Monitor Security Logs: Regularly monitor security logs for any suspicious activity related to file access.

Additional Information

This vulnerability poses a significant threat to WordPress websites using the Error Log Viewer By WP Guru plugin. It is crucial to take immediate action to mitigate the risk of exploitation.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.

Indicators of Compromise

No IOCs found for this CVE

Exploits

TitleSoftware LinkDate
Nxploited/CVE-2024-12849-Pochttps://github.com/Nxploited/CVE-2024-12849-Poc2025-01-07
Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CREATE FREE ACCOUNT
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-12849 | WP Guru Error Log Viewer Plugin up to 1.0.1.3 on WordPress authorization
vuldb.com2025-01-06
CVE-2024-12849 | WP Guru Error Log Viewer Plugin up to 1.0.1.3 on WordPress authorization | A vulnerability was found in WP Guru Error Log Viewer Plugin up to 1.0.1.3 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to missing authorization. The identification of this vulnerability is CVE-2024-12849. The attack may be initiated remotely. There is no exploit available.
vuldb.com
rss
forum
news

Social Media

CVE-2024-12849 (CVSS:7.5, HIGH) is Awaiting Analysis. The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and inc..https://t.co/uWvm8W0paf #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
0
0
0

Affected Software

No affected software found for this CVE

References

ReferenceLink
[email protected]https://plugins.trac.wordpress.org/browser/error-log-viewer-wp/tags/1.0.1.3/error-log-viewer-wp.php#L295
[email protected]https://plugins.trac.wordpress.org/browser/error-log-viewer-wp/tags/1.0.1.3/error-log-viewer-wp.php#L479
[email protected]https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215563%40error-log-viewer-wp&new=3215563%40error-log-viewer-wp&sfp_email=&sfph_mail=#file10
[email protected]https://www.wordfence.com/threat-intel/vulnerabilities/id/57888e36-3a61-4452-b4ea-9db9e422dc2d?source=cve

CWE Details

CWE IDCWE NameDescription
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence