CVE-2024-13365Disclosure(cleantalk / security_\&_malware_scan)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through the checkUploadedArchive() function in all versions up to, and including, 2.149. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

cleantalk CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://plugins.trac.wordpress.org/changeset/3229205/security-malware-firewall#file527

Vendor / third-party advisories

https://www.wordfence.com/threat-intel/vulnerabilities/id/9fa30fa2-6c42-4e5f-a0b5-8711ce5d8121?source=cve

Weakness type (CWE)

CWE-434

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

security_\&_malware_scan

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

cleantalk

Products

security_\&_malware_scan

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://zerodaysignal.com/vulnerability/CVE-2024-13365

Full discourse1 post

0day Signal@0dayPublishing185d
Disclosure
🚨 CVE-2024-13365: Security & Malware scan by Clean... CleanTalk's malware scanner becomes the malware - unauthenticated zip extraction in checkUploadedArchive() = instant RC... https://zerodaysignal.com/vulnerability/CVE-2024-13365 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces CVE-2024-13365, noting that an unauthenticated zip extraction in CleanTalk's malware scanner can lead to instant remote code execution, but no PoC, exploit, or patch is disclosed.
0000035
204 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	cleantalk	security_\&_malware_scan	-	wordpress	-

Explore more

Back to dashboard cleantalk CVEs security_\&_malware_scan vulnerabilities