CVE-2024-6467
Last modified
CVE-2024-6467 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to Arbitrary File Read to Arbitrary File Creation in all versions up to, and including, 1.1.5 via the 'bookingpress_save_lite_wizard_settings_func' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary files that contain the content of files (either on the local server or from a remote location), allowing the execution of any PHP code in those files or the exposure of sensitive information.. EPSS estimates a 0.86% chance of exploitation in the next 30 days.
Description
The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to Arbitrary File Read to Arbitrary File Creation in all versions up to, and including, 1.1.5 via the 'bookingpress_save_lite_wizard_settings_func' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary files that contain the content of files (either on the local server or from a remote location), allowing the execution of any PHP code in those files or the exposure of sensitive information.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Reputeinfosystems | Bookingpress | < 1.1.6 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-6467?
How severe is CVE-2024-6467?
How do I fix CVE-2024-6467?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-6461Rejected reason: **REJECT** This is a duplicate CVE issued i…
- CVE-2024-6462The DL Yandex Metrika WordPress plugin through 1.2 does not …4.8
- CVE-2024-6463Rejected reason: **REJECT** This is a duplicate CVE issued i…
- CVE-2024-6464Rejected reason: **REJECT** This is a duplicate CVE issued i…
- CVE-2024-6465The WP Links Page plugin for WordPress is vulnerable to unau…4.3
- CVE-2024-6466NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 all…5.3
- CVE-2024-6468Vault and Vault Enterprise did not properly handle requests …7.5
- CVE-2024-6469A vulnerability was found in playSMS 1.4.3. It has been decl…8.8
- CVE-2024-6470A vulnerability was found in playSMS 1.4.3. It has been rate…2.7
- CVE-2024-6471A vulnerability classified as critical has been found in Sou…8.8
- CVE-2024-6472Certificate Validation user interface in LibreOffice allows …7.8
- CVE-2024-6473Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijac…7.8
Are you affected by CVE-2024-6467?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST