$ cve CVE-2017-16949 JSON

CVE-2017-16949 EXPLOIT

9.8

CRITICAL · CVSS 3.0 · EPSS 19.2% (pctl 97)

Patch early

A public exploit exists.

Description

An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related to inc/cores/file-uploader.php and file-uploader/file-uploader-class.php. This allows the attacker to upload anything they want to the server, as demonstrated by an action=ap_file_upload_action&allowedExtensions[]=php request to /wp-admin/admin-ajax.php that results in a .php file upload and resultant PHP code execution.

Scoring

CVSS	9.8 (CRITICAL, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	19.15% — more likely to be exploited than 97% of all CVEs
Weakness	CWE-434
On CISA KEV	no
Public exploit	yes
Published	2017-12-19
Last modified	2026-06-17

Affected (1)

Vendor	Product
accesspressthemes	anonymous post pro

Public exploits

Source	Title	Date
exploit-db	Accesspress Anonymous Post Pro < 3.2.0 - Arbitrary File Upload	2017-12-12

References

→ the Explorer · watch your stack · NVD