WordPress PDF 2 Post Plugin Remote Code Execution Vulnerability

A code injection vulnerability allowing remote code execution has been identified in the WordPress PDF 2 Post plugin, affecting versions through 2.4.0. This vulnerability arises from improper control over code generation, leading to remote code inclusion.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and control over the site.

Remediation

Users are advised to remove or replace the PDF 2 Post plugin, as it is likely abandoned and will not receive further updates. Patchstack has issued a virtual patch to mitigate this vulnerability for users who subscribe to their service.