WP Delicious Recipe Plugin Arbitrary File Upload Vulnerability Allowing Remote Code Execution

A vulnerability exists in the WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) for WordPress. All versions through 1.9.0 are affected by an arbitrary file upload vulnerability. This issue allows an authenticated user with Contributor-level permissions to upload a malicious PHP file by specifying a remote URL during the recipe import process via CSV. The uploaded file can then be executed, leading to remote code execution on the server.

Impact

Exploitation of this vulnerability allows for arbitrary file uploads, with the potential for remote code execution on the server.

Reproduction

To reproduce this vulnerability, an authenticated user with Contributor-level permissions can import recipes using a CSV file. During the import process, the user can provide a remote URL that points to a malicious PHP file. Once the file is uploaded, it can be executed on the server, leading to remote code execution.

Remediation

Users are advised to update the WP Delicious – Recipe Plugin for Food Bloggers to version 1.9.1 or a newer patched version.