WordPress WPOptin Plugin <= 2.0.1 - Lokale Datei-Inklusions-Schwachstelle

The Path Traversal vulnerability in Top Bar – PopUps allows attackers to bypass intended file access restrictions. By manipulating file paths, an attacker can include files outside of the intended directory, potentially gaining access to sensitive configuration files, source code, or other critical system files. Successful exploitation could lead to the disclosure of database credentials, API keys, or other confidential information. In a worst-case scenario, an attacker could leverage this vulnerability to execute arbitrary code on the server, compromising the entire WordPress installation and potentially affecting other connected systems. This is similar to other Local File Inclusion vulnerabilities where attackers leverage path manipulation to gain unauthorized access.

WordPress websites using the Top Bar – PopUps plugin, particularly those running versions 2.0.1 or earlier, are at risk. Shared hosting environments where file permissions are not tightly controlled are especially vulnerable, as an attacker could potentially exploit this flaw to gain access to other websites hosted on the same server.

• wordpress / composer / npm:

grep -r "../" /var/www/html/wp-content/plugins/top-bar-popups-by-wpoptin/*

• generic web:

curl -I 'http://your-wordpress-site.com/wp-content/plugins/top-bar-popups-by-wpoptin/../../../../etc/passwd' # Check for file disclosure

1. 2024-10-16Disclosure

   disclosure

1. Reserviert2024-09-30
2. Veröffentlicht2024-10-16
3. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-47645 is to immediately upgrade the Top Bar – PopUps plugin to version 2.0.2 or later. If upgrading is not immediately feasible, consider implementing temporary workarounds such as restricting file access permissions on the server and carefully validating all user-supplied input to prevent path manipulation. Web Application Firewalls (WAFs) configured to detect and block attempts to access files outside of the intended directory can also provide an additional layer of protection. Monitor WordPress access logs for suspicious file access attempts, particularly those involving directory traversal sequences like '../'.