Borderless WordPress Plugin Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the Borderless WordPress plugin, specifically in the 'write_config' function. This issue affects all versions of the plugin up to and including 1.6.0. The vulnerability arises from inadequate sanitization of an imported JSON file, allowing authenticated attackers with Administrator-level access to execute arbitrary code on the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where the affected WordPress site is hosted.

Reproduction

To reproduce this vulnerability, an authenticated user with Administrator privileges can upload a ZIP file containing a Fontello icon pack. The plugin will unzip the file and process it, including a JSON file that can be crafted to execute arbitrary PHP code. The 'write_config' function will then be called, executing the injected code.

Remediation

Users are advised to update the Borderless WordPress plugin to version 1.6.1 or later.