CVE-2024-6431: 
WordPress vulnerability analysis and mitigation

The Media.net Ads Manager plugin for WordPress contains a vulnerability (CVE-2024-6431) that allows arbitrary file uploads due to missing file type validation and missing capability checks in the 'sendMail' function. This vulnerability affects all versions up to and including 2.10.13. The issue is particularly concerning as it affects authenticated users with subscriber-level permissions and above, but is only exploitable if someone has previously logged in through the API (NVD).

The vulnerability stems from insufficient security controls in the 'sendMail' function, specifically the lack of file type validation and proper capability checks. The CVSS v3.1 score is 8.8 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-434 (Unrestricted Upload of File with Dangerous Type) (Wordfence).

The vulnerability allows authenticated attackers with subscriber-level permissions or higher to upload arbitrary files to the affected site's server. This capability could potentially lead to remote code execution, representing a significant security risk to affected WordPress installations (NVD).

The vulnerability requires authentication at the subscriber level or higher and is only exploitable if a user has previously logged in through the API. This condition somewhat limits the potential attack surface, but still presents a significant risk given the widespread use of WordPress and the common practice of allowing user registration (NVD).

Website administrators running the Media.net Ads Manager plugin should immediately update to a version newer than 2.10.13 if available. If an update is not available, consider disabling the plugin until a patch is released. Additionally, reviewing and limiting user roles and permissions can help reduce the risk of exploitation (NVD).