CVE-2018-17573

Name: CVE-2018-17573
Creator: NVD / NIST
Published: 2018-09-28T05:29:00.45+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 3.36%

Last modified Jun 17, 2026

CVE-2018-17573 is a vulnerability of currently unknown severity. The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/editor/filemanager/connectors/test.html, and fckeditor/editor/filemanager/connectors/uploadtest.html.. EPSS estimates a 3.36% chance of exploitation in the next 30 days.

Description

The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/editor/filemanager/connectors/test.html, and fckeditor/editor/filemanager/connectors/uploadtest.html.

Metrics

EPSS Probability

3.36%

87.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-434

Affected Software

Vendor	Product	Versions
Smartlogix	Wp-Insert	<= 2.4.2

References

https://cxsecurity.com/issue/WLB-2018090255Exploit, Third Party Advisory
https://packetstormsecurity.com/files/149568/WordPress-WP-Insert-2.4.2-Arbitrary-File-Upload.htmlExploit, Third Party Advisory, VDB Entry
https://cxsecurity.com/issue/WLB-2018090255Exploit, Third Party Advisory
https://packetstormsecurity.com/files/149568/WordPress-WP-Insert-2.4.2-Arbitrary-File-Upload.htmlExploit, Third Party Advisory, VDB Entry

Timeline

Published: Sep 28, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-17573?

How severe is CVE-2018-17573?

Severity scoring for CVE-2018-17573 is pending analysis. The EPSS model estimates a 3.36% probability of exploitation in the next 30 days.

How do I fix CVE-2018-17573?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-17573?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST