KiviCare Clinic and Patient Management System WordPress Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing arbitrary file uploads has been identified in the KiviCare Clinic & Patient Management System (EHR) WordPress plugin, affecting all versions through 3.6.15. The issue arises from inadequate authorization checks in the uploadMedicalReport() function, which allow unauthenticated users to upload text files and PDF documents to the server. This could be exploited to host malicious content or phishing pages using the uploaded PDF files.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, allowing for the distribution of malicious content or phishing attempts via uploaded PDF documents.

Reproduction

The vulnerability can be reproduced by sending a request to the uploadMedicalReport() function without proper authentication. This can be done by an unauthenticated user, taking advantage of the missing authorization checks to upload files directly to the server.

Remediation

Users are advised to update the KiviCare WordPress plugin to version 3.6.16 or later.