CVE-2024-5450: 
WordPress vulnerability analysis and mitigation

The Bug Library WordPress plugin before version 2.1.1 contains a critical security vulnerability (CVE-2024-5450) that was discovered on June 22, 2024. The vulnerability allows unauthenticated users to upload PHP files through the bug report submission feature, potentially leading to Remote Code Execution (RCE) (WPScan).

The vulnerability stems from the plugin's failure to implement proper file type validation on user-submitted bug reports. When the plugin is configured to allow file attachments from the 'Bugs > General Options' section and the '[bug-library]' shortcode is added to a post, any unauthenticated user can upload PHP files to the server. The vulnerability has received a CVSS score of 9.1 (Critical) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, indicating high severity and potential for remote exploitation (WPScan, NVD).

The vulnerability allows attackers to upload malicious PHP files to the server, potentially leading to remote code execution. This could result in complete server compromise, allowing attackers to execute arbitrary commands, modify website content, or gain unauthorized access to sensitive information (WPScan).

The vulnerability is easily exploitable by unauthenticated users when the plugin is configured to allow file attachments. The exploit process involves visiting a page with the '[bug-library]' shortcode and uploading a PHP file through the bug report submission form. When directory listing is enabled, uploaded files become accessible through the wp-content/uploads/bug-library/ directory (WPScan).

Users are strongly advised to update the Bug Library plugin to version 2.1.1 or later, which includes a fix for this vulnerability. If immediate updating is not possible, it is recommended to disable file attachment functionality in the plugin's settings (WPScan).