काउंटडाउन, कमिंग सून, मेंटेनेंस – काउंटडाउन & क्लॉक <= 2.8.9.1 - प्रमाणीकृत सीमित स्थानीय फ़ाइल समावेशन

The LFI vulnerability in the Countdown plugin allows an attacker to execute arbitrary PHP code on the server. By manipulating the createCdObj function, an attacker can specify a file path to include, effectively reading and potentially executing any file accessible to the webserver user. This could lead to the disclosure of sensitive configuration files, database credentials, or even the complete takeover of the WordPress site. The impact is significant as it allows for code execution without authentication, enabling attackers to bypass access controls and escalate privileges. A successful exploit could result in data breaches, website defacement, and complete system compromise.

Websites utilizing the Countdown, Coming Soon, Maintenance – Countdown & Clock plugin, particularly those running older, unpatched versions (0.0.0–2.8.9.1), are at significant risk. Shared hosting environments where WordPress installations have limited access controls are also particularly vulnerable.

• wordpress / composer / npm:

grep -r 'createCdObj' /var/www/html/wp-content/plugins/countdown-coming-soon-maintenance-countdown-clock/

• wordpress / composer / npm:

wp plugin list | grep 'Countdown, Coming Soon, Maintenance'

• wordpress / composer / npm:

wp plugin update countdown-coming-soon-maintenance-countdown-clock

1. 2025-04-04Disclosure

   disclosure

1. आरक्षित2025-03-12
2. प्रकाशित2025-04-04
3. संशोधित2026-04-08
4. EPSS अद्यतन2026-03-23

The primary mitigation for CVE-2025-2270 is to immediately upgrade the Countdown, Coming Soon, Maintenance – Countdown & Clock plugin to version 2.8.10 or later. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) rule to block requests containing suspicious file paths in the createCdObj parameter. Additionally, restrict file permissions on the WordPress server to minimize the potential impact of a successful exploit. After upgrading, verify the fix by attempting to access a non-existent file through the vulnerable parameter; the server should return a 404 error instead of including the file.

सक्रिय इंस्टॉलेशन

10Kज्ञात

प्लगइन रेटिंग