CVE-2017-16949
CriticalSummary
The AccessKeys AccessPress Anonymous Post Pro plugin for WordPress versions up to 3.1.9 has an issue with improper input sanitization. This allows an attacker to override settings for allowed file extensions and upload file size, leading to the ability to upload any files to the server.
Risk Assessment
An attacker can upload a malicious PHP file to the server, resulting in unauthorized code execution and potential system takeover. This poses a serious threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to update the plugin to the latest version to mitigate this vulnerability. Additionally, implementing further security measures, such as restricting allowed file types and monitoring uploaded files, is advisable.
Original NVD description (English source)
An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.