WordPress CVEs

Description

The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to insert arbitrary content into log files, and potentially cause denial of service via disk space exhaustion.

Affected WordPress components

• site-checkup Plugin · site-checkup
  Confirmed match Homeless
  Up to and including 1.47
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• sminozzi Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue — Up to and including 1.47

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/site-checkup/tags/1.47/includes/catch-errors/class_bill_catch_errors.php#L80
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3380169/
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/50251b17-58d7-4870-b825-a194312fb3e7?source=cve
• nvd.nist.gov Official NVD record