Critical · published February 28, 2025
🚨 A Local File Inclusion vulnerability lurking in the WHMpress plugin for WordPress could let an attacker execute any file on your server — talk about an uninvited guest! 🔥 Imagine a restaurant where anyone can slip a menu item into the kitchen without any checks. With this vulnerability, attackers can serve up malicious code as if it were a regular dish, potentially taking control of the entire dining experience (your WordPress site). An attacker could exploit this vulnerability to include and execute arbitrary PHP files, bypass access controls, and obtain sensitive data. They could even elevate their access to administrative levels, turning a harmless site into a playground for malicious activities! Your site's integrity could be shattered in moments.
Imagine a restaurant where anyone can slip a menu item into the kitchen without any checks. With this vulnerability, attackers can serve up malicious code as if it were a regular dish, potentially taking control of the entire dining experience (your WordPress site). This vulnerability in the WHMpress plugin allows unauthenticated attackers to execute arbitrary files via the `whmpress_domain_search_ajax_extended_results()` function, leading to potential remote code execution and unauthorized access to sensitive site options.
An attacker could exploit this vulnerability to include and execute arbitrary PHP files, bypass access controls, and obtain sensitive data. They could even elevate their access to administrative levels, turning a harmless site into a playground for malicious activities! Your site's integrity could be shattered in moments. Immediate action is crucial! Update the WHMpress plugin to version 6.3-revision-1 or later. Additionally, review and tighten permissions on the server to limit file execution capabilities. Conduct security audits to ensure no malicious changes have been made. You've got this! Follow these steps, and your site will be safe and sound in no time! 🛡️