WordPress Vulnerabilities

WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion

Description

This can lead to code execution if the wp-config.php file is deleted, forcing WordPress to start the installation process.

Can be exploited by any user who is able to edit uploaded media.

Affects WordPress

3.8.1
Fixed in WordPress 4.9.7
3.8
Fixed in WordPress 4.9.7
3.7.1
Fixed in WordPress 3.7.27
3.6
No known fix
3.5.2
No known fix
3.5.1
No known fix
3.5
No known fix
3.4.2
No known fix
3.4.1
No known fix
3.4
No known fix
3.3.3
No known fix
3.3.2
No known fix
3.3.1
No known fix
3.3
No known fix
3.2.1
No known fix
3.2
No known fix
3.1.4
No known fix
3.1.3
No known fix
3.1.2
No known fix
3.1.1
No known fix
3.1
No known fix
3.0.6
No known fix
3.0.5
No known fix
3.0.4
No known fix
3.0.3
No known fix
3.0.2
No known fix
3.0.1
No known fix
3.0
No known fix
2.9.2
No known fix
2.9.1
No known fix
2.9
No known fix
2.8.6
No known fix
2.8.5
No known fix
2.8.4
No known fix
2.8.3
No known fix
2.8.2
No known fix
2.8.1
No known fix
2.8
No known fix
2.7.1
No known fix
2.7
No known fix
2.6.5
No known fix
2.6.3
No known fix
2.6.2
No known fix
2.6.1
No known fix
2.6
No known fix
2.5.1
No known fix
2.5
No known fix
2.3.3
No known fix
2.3.2
No known fix
2.3.1
No known fix
2.3
No known fix
2.2.3
No known fix
2.2.2
No known fix
2.2.1
No known fix
2.2
No known fix
2.1.3
No known fix
2.1.2
No known fix
2.1.1
No known fix
2.1
No known fix
2.0.11
No known fix
2.0.10
No known fix
2.0.9
No known fix
2.0.8
No known fix
2.0.7
No known fix
2.0.6
No known fix
2.0.5
No known fix
2.0.4
No known fix
2.0.3
No known fix
2.0.2
No known fix
2.0.1
No known fix
2.0
No known fix
1.5.2
No known fix
1.5.1.3
No known fix
1.5.1.2
No known fix
1.5.1.1
No known fix
1.5.1
No known fix
1.5
No known fix
3.6.1
No known fix
3.9
Fixed in WordPress 3.9.25
3.9.1
Fixed in WordPress 3.9.25
3.7
Fixed in WordPress 3.7.27
3.8.2
Fixed in WordPress 3.8.27
3.8.3
Fixed in WordPress 3.8.27
3.9.2
Fixed in WordPress 3.9.25
4.0
Fixed in WordPress 4.0.24
1.2
No known fix
1.2.1
No known fix
0.70
No known fix
4.1
Fixed in WordPress 4.1.24
4.1.1
Fixed in WordPress 4.1.24
4.2
Fixed in WordPress 4.2.21
3.9.3
Fixed in WordPress 3.9.25
4.1.2
Fixed in WordPress 4.1.24
4.2.1
Fixed in WordPress 4.2.21
4.0.1
Fixed in WordPress 4.0.24
4.1.5
Fixed in WordPress 4.1.24
4.1.4
Fixed in WordPress 4.1.24
4.1.3
Fixed in WordPress 4.1.24
3.8.4
Fixed in WordPress 3.8.27
3.7.4
Fixed in WordPress 3.7.27
4.2.3
Fixed in WordPress 4.2.21
3.8.8
Fixed in WordPress 3.8.27
3.8.5
Fixed in WordPress 3.8.27
3.8.6
Fixed in WordPress 3.8.27
3.8.7
Fixed in WordPress 3.8.27
0.71
No known fix
0.711
No known fix
0.72
No known fix
1.0
No known fix
1.0.1
No known fix
1.0.2
No known fix
1.2.2
No known fix
3.7.2
Fixed in WordPress 3.7.27
3.7.3
Fixed in WordPress 3.7.27
3.7.5
Fixed in WordPress 3.7.27
3.7.6
Fixed in WordPress 3.7.27
3.7.7
Fixed in WordPress 3.7.27
3.7.8
Fixed in WordPress 3.7.27
3.7.9
Fixed in WordPress 3.7.27
3.8.9
Fixed in WordPress 3.8.27
3.9.4
Fixed in WordPress 3.9.25
3.9.5
Fixed in WordPress 3.9.25
3.9.6
Fixed in WordPress 3.9.25
3.9.7
Fixed in WordPress 3.9.25
4.0.2
Fixed in WordPress 4.0.24
4.0.3
Fixed in WordPress 4.0.24
4.0.4
Fixed in WordPress 4.0.24
4.0.5
Fixed in WordPress 4.0.24
4.0.6
Fixed in WordPress 4.0.24
4.1.6
Fixed in WordPress 4.1.24
4.2.2
Fixed in WordPress 4.2.21
4.2.4
Fixed in WordPress 4.2.21
4.1.7
Fixed in WordPress 4.1.24
4.0.7
Fixed in WordPress 4.0.24
3.9.8
Fixed in WordPress 3.9.25
3.8.10
Fixed in WordPress 3.8.27
3.7.10
Fixed in WordPress 3.7.27
4.3
Fixed in WordPress 4.3.17
4.3.1
Fixed in WordPress 4.3.17
4.2.5
Fixed in WordPress 4.2.21
4.1.8
Fixed in WordPress 4.1.24
4.0.8
Fixed in WordPress 4.0.24
3.9.9
Fixed in WordPress 3.9.25
3.8.11
Fixed in WordPress 3.8.27
3.7.11
Fixed in WordPress 3.7.27
4.4
Fixed in WordPress 4.4.16
3.7.12
Fixed in WordPress 3.7.27
3.8.12
Fixed in WordPress 3.8.27
3.9.10
Fixed in WordPress 3.9.25
4.0.9
Fixed in WordPress 4.0.24
4.1.9
Fixed in WordPress 4.1.24
4.2.6
Fixed in WordPress 4.2.21
4.3.2
Fixed in WordPress 4.3.17
4.4.1
Fixed in WordPress 4.4.16
4.4.2
Fixed in WordPress 4.4.16
4.3.3
Fixed in WordPress 4.3.17
4.2.7
Fixed in WordPress 4.2.21
4.1.10
Fixed in WordPress 4.1.24
4.0.10
Fixed in WordPress 4.0.24
3.9.11
Fixed in WordPress 3.9.25
3.8.13
Fixed in WordPress 3.8.27
3.7.13
Fixed in WordPress 3.7.27
4.5
Fixed in WordPress 4.5.15
4.5.1
Fixed in WordPress 4.5.15
3.7.14
Fixed in WordPress 3.7.27
3.8.14
Fixed in WordPress 3.8.27
3.9.12
Fixed in WordPress 3.9.25
4.0.11
Fixed in WordPress 4.0.24
4.1.11
Fixed in WordPress 4.1.24
4.2.8
Fixed in WordPress 4.2.21
4.3.4
Fixed in WordPress 4.3.17
4.4.3
Fixed in WordPress 4.4.16
4.5.2
Fixed in WordPress 4.5.15
4.5.3
Fixed in WordPress 4.5.15
3.7.15
Fixed in WordPress 3.7.27
3.8.15
Fixed in WordPress 3.8.27
3.9.13
Fixed in WordPress 3.9.25
4.0.12
Fixed in WordPress 4.0.24
4.1.12
Fixed in WordPress 4.1.24
4.2.9
Fixed in WordPress 4.2.21
4.3.5
Fixed in WordPress 4.3.17
4.4.4
Fixed in WordPress 4.4.16
4.6
Fixed in WordPress 4.6.12
3.7.16
Fixed in WordPress 3.7.27
3.8.16
Fixed in WordPress 3.8.27
3.9.14
Fixed in WordPress 3.9.25
4.0.13
Fixed in WordPress 4.0.24
4.1.13
Fixed in WordPress 4.1.24
4.2.10
Fixed in WordPress 4.2.21
4.3.6
Fixed in WordPress 4.3.17
4.4.5
Fixed in WordPress 4.4.16
4.5.4
Fixed in WordPress 4.5.15
4.6.1
Fixed in WordPress 4.6.12
4.7
Fixed in WordPress 4.7.11
3.7.17
Fixed in WordPress 3.7.27
3.8.17
Fixed in WordPress 3.8.27
3.9.15
Fixed in WordPress 3.9.25
4.0.14
Fixed in WordPress 4.0.24
4.1.14
Fixed in WordPress 4.1.24
4.2.11
Fixed in WordPress 4.2.21
4.3.7
Fixed in WordPress 4.3.17
4.4.6
Fixed in WordPress 4.4.16
4.5.5
Fixed in WordPress 4.5.15
4.7.1
Fixed in WordPress 4.7.11
4.6.2
Fixed in WordPress 4.6.12
3.7.18
Fixed in WordPress 3.7.27
3.8.18
Fixed in WordPress 3.8.27
3.9.16
Fixed in WordPress 3.9.25
4.0.15
Fixed in WordPress 4.0.24
4.1.15
Fixed in WordPress 4.1.24
4.2.12
Fixed in WordPress 4.2.21
4.3.8
Fixed in WordPress 4.3.17
4.4.7
Fixed in WordPress 4.4.16
4.5.6
Fixed in WordPress 4.5.15
4.6.3
Fixed in WordPress 4.6.12
4.7.2
Fixed in WordPress 4.7.11
3.7.19
Fixed in WordPress 3.7.27
3.8.19
Fixed in WordPress 3.8.27
3.9.17
Fixed in WordPress 3.9.25
4.0.16
Fixed in WordPress 4.0.24
4.1.16
Fixed in WordPress 4.1.24
4.2.13
Fixed in WordPress 4.2.21
4.3.9
Fixed in WordPress 4.3.17
4.4.8
Fixed in WordPress 4.4.16
4.5.7
Fixed in WordPress 4.5.15
4.6.4
Fixed in WordPress 4.6.12
4.7.3
Fixed in WordPress 4.7.11
3.7.20
Fixed in WordPress 3.7.27
3.8.20
Fixed in WordPress 3.8.27
3.9.18
Fixed in WordPress 3.9.25
4.0.17
Fixed in WordPress 4.0.24
4.1.17
Fixed in WordPress 4.1.24
4.2.14
Fixed in WordPress 4.2.21
4.3.10
Fixed in WordPress 4.3.17
4.4.9
Fixed in WordPress 4.4.16
4.5.8
Fixed in WordPress 4.5.15
4.6.5
Fixed in WordPress 4.6.12
4.7.4
Fixed in WordPress 4.7.11
4.7.5
Fixed in WordPress 4.7.11
3.7.21
Fixed in WordPress 3.7.27
3.8.21
Fixed in WordPress 3.8.27
3.9.19
Fixed in WordPress 3.9.25
4.0.18
Fixed in WordPress 4.0.24
4.1.18
Fixed in WordPress 4.1.24
4.2.15
Fixed in WordPress 4.2.21
4.3.11
Fixed in WordPress 4.3.17
4.4.10
Fixed in WordPress 4.4.16
4.5.9
Fixed in WordPress 4.5.15
4.6.6
Fixed in WordPress 4.6.12
4.8
Fixed in WordPress 4.8.7
4.8.1
Fixed in WordPress 4.8.7
3.7.22
Fixed in WordPress 3.7.27
3.8.22
Fixed in WordPress 3.8.27
3.9.20
Fixed in WordPress 3.9.25
4.0.19
Fixed in WordPress 4.0.24
4.1.19
Fixed in WordPress 4.1.24
4.2.16
Fixed in WordPress 4.2.21
4.3.12
Fixed in WordPress 4.3.17
4.4.11
Fixed in WordPress 4.4.16
4.5.10
Fixed in WordPress 4.5.15
4.6.7
Fixed in WordPress 4.6.12
4.7.6
Fixed in WordPress 4.7.11
4.8.2
Fixed in WordPress 4.8.7
4.8.3
Fixed in WordPress 4.8.7
3.7.23
Fixed in WordPress 3.7.27
3.8.23
Fixed in WordPress 3.8.27
3.9.21
Fixed in WordPress 3.9.25
4.0.20
Fixed in WordPress 4.0.24
4.1.20
Fixed in WordPress 4.1.24
4.2.17
Fixed in WordPress 4.2.21
4.3.13
Fixed in WordPress 4.3.17
4.4.12
Fixed in WordPress 4.4.16
4.5.11
Fixed in WordPress 4.5.15
4.6.8
Fixed in WordPress 4.6.12
4.7.7
Fixed in WordPress 4.7.11
4.9
Fixed in WordPress 4.9.7
4.9.1
Fixed in WordPress 4.9.7
4.8.4
Fixed in WordPress 4.8.7
4.7.8
Fixed in WordPress 4.7.11
4.6.9
Fixed in WordPress 4.6.12
4.5.12
Fixed in WordPress 4.5.15
4.4.13
Fixed in WordPress 4.4.16
4.3.14
Fixed in WordPress 4.3.17
4.2.18
Fixed in WordPress 4.2.21
4.1.21
Fixed in WordPress 4.1.24
4.0.21
Fixed in WordPress 4.0.24
3.9.22
Fixed in WordPress 3.9.25
3.8.24
Fixed in WordPress 3.8.27
3.7.24
Fixed in WordPress 3.7.27
4.9.2
Fixed in WordPress 4.9.7
4.8.5
Fixed in WordPress 4.8.7
4.7.9
Fixed in WordPress 4.7.11
4.6.10
Fixed in WordPress 4.6.12
4.5.13
Fixed in WordPress 4.5.15
4.4.14
Fixed in WordPress 4.4.16
4.3.15
Fixed in WordPress 4.3.17
4.2.19
Fixed in WordPress 4.2.21
4.1.22
Fixed in WordPress 4.1.24
4.0.22
Fixed in WordPress 4.0.24
3.9.23
Fixed in WordPress 3.9.25
3.8.25
Fixed in WordPress 3.8.27
3.7.25
Fixed in WordPress 3.7.27
4.9.3
Fixed in WordPress 4.9.7
4.9.4
Fixed in WordPress 4.9.7
3.7.26
Fixed in WordPress 3.7.27
3.8.26
Fixed in WordPress 3.8.27
3.9.24
Fixed in WordPress 3.9.25
4.0.23
Fixed in WordPress 4.0.24
4.1.23
Fixed in WordPress 4.1.24
4.2.20
Fixed in WordPress 4.2.21
4.3.16
Fixed in WordPress 4.3.17
4.4.15
Fixed in WordPress 4.4.16
4.5.14
Fixed in WordPress 4.5.15
4.6.11
Fixed in WordPress 4.6.12
4.7.10
Fixed in WordPress 4.7.11
4.8.6
Fixed in WordPress 4.8.7
4.9.5
Fixed in WordPress 4.9.7
4.9.6
Fixed in WordPress 4.9.7

References

CVE
CVE-2018-12895
URL
https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/
URL
http://blog.vulnspy.com/2018/06/27/Wordpress-4-9-6-Arbitrary-File-Delection-Vulnerbility-Exploit/
URL
https://github.com/WordPress/WordPress/commit/c9dce0606b0d7e6f494d4abe7b193ac046a322cd
URL
https://wordpress.org/news/2018/07/wordpress-4-9-7-security-and-maintenance-release/
URL
https://www.wordfence.com/blog/2018/07/details-of-an-additional-file-deletion-vulnerability-patched-in-wordpress-4-9-7/

Miscellaneous

Submitter
Ryan
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
42ab2bd9-bbb1-4f25-a632-1811c5130bb4

Timeline

Publicly Published
2018-06-27 (about 8 years ago)
Added
2018-06-27 (about 8 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-08-01
Title
Lazyest Gallery 0.10.4.3 - Multiple File/Directory Insecure Permissions Local Content Manipulation
Published
2014-08-01
Title
NextGEN Gallery 2.0.0 - Directory Traversal
Published
2024-12-09
Title
Best WordPress Gallery Plugin – FooGallery < 2.4.27 - Authenticated (Contributor+) Directory Traversal
Published
2014-08-01
Title
ShareYourCart 1.6.1 - SDK Multiple Unspecified Path Disclosure
Published
2014-08-01
Title
WordPress 3.6 - Post Authorship Spoofing