AccessAlly WordPress Plugin Unauthenticated Arbitrary PHP Code Execution Vulnerability

A vulnerability allowing unauthenticated arbitrary PHP code execution has been identified in the AccessAlly WordPress plugin, affecting versions prior to 3.3.2. The issue arises in the Login Widget, where the plugin improperly processes the login_error parameter as PHP code. This flaw enables attackers to inject and execute arbitrary PHP code within the context of the WordPress web server process, leading to remote code execution.

Impact

Exploitation of this vulnerability allows for unauthenticated users to execute arbitrary PHP code on the server, potentially leading to full control over the WordPress site.

Reproduction

The vulnerability can be reproduced by sending a request to the login widget with a crafted login_error parameter that includes PHP code. The injected PHP code will be executed on the server, allowing for arbitrary code execution.

Remediation

Users are advised to update the AccessAlly WordPress plugin to version 3.3.2 or later, where this vulnerability has been fixed.