Aeropage Sync for Airtable WordPress Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the Aeropage Sync for Airtable WordPress plugin, affecting all versions up to and including 3.2.0. The issue arises from inadequate file type validation in the 'aeropage_media_downloader' function. This vulnerability enables authenticated attackers with Subscriber-level access and above to upload arbitrary files to the server, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability could allow for unauthorized file uploads, which may be executed remotely, depending on the file type and context.

Reproduction

To reproduce this vulnerability, an authenticated user with Subscriber-level access or higher can upload files through the media downloader feature of the Aeropage Sync for Airtable WordPress plugin, version 3.2.0 or earlier. The plugin's functionality allows for the synchronization of Airtable data, including media attachments, which can be exploited to upload malicious files to the WordPress site.

Remediation

Users are advised to update the Aeropage Sync for Airtable WordPress plugin to version 3.3.0 or later, where this vulnerability has been patched.