Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
記事を投稿しました！ TryHackMe Writeup: Wordpress: CVE-2021-29447 on #Qiita https://qiita.com/rikum0730/items/4a76c7f6d8825f10c493?utm_campaign=post_article&utm_medium=twitter&utm_source=twitter_share
Post summary
The tweet announces a Qiita article about WordPress CVE‑2021‑29447 but provides no further details on exploitation, patches, or technical specifics.
Completed Wordpress: CVE-2021-29447 room on TryHackMe! https://tryhackme.com/room/wordpresscve202129447?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=66457951599dd28bfb000ded #tryhackme via @tryhackme #tryhackme #learning #consistency
Post summary
The user finished a TryHackMe room that covers CVE-2021-29447, with no further details about exploitation or remediation.
@tryhackme I just completed Wordpress: CVE-2021-29447 room on TryHackMe! Vulnerability allow a authenticated user whith low privilages upload a malicious WAV file that could lead to remote arbitrary file disclosure and server-side request forgery (SSRF). https://tryhackme.com/room/wordpresscve202129447?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=67c5a2369a2064b00449c4e6 #tryhackme
Post summary
User shares completion of a TryHackMe room on CVE‑2021‑29447, describing how low‑privilege authenticated users can upload malicious WAV files to achieve arbitrary file disclosure and SSRF.
I just completed Wordpress: CVE-2021-29447 room on TryHackMe! Vulnerability allow a authenticated user whith low privilages upload a malicious WAV file that could lead to remote arbitrary file disclosure and SSRF. https://tryhackme.com/room/wordpresscve202129447?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=621772229e33c30050c7bc9b #tryhackme via @tryhackme
Post summary
A TryHackMe room on CVE‑2021‑29447 is highlighted, describing a file‑upload flaw that permits arbitrary file disclosure and SSRF, but no active exploitation or patches are mentioned.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 10.0 | - | - |
| OS | debian | debian_linux | 9.0 | - | - |
| App | wordpress | wordpress | - | - | - |