CVE-2019-11185 : What You Need to Know

WordPress Live Chat Support Pro plugin versions up to 8.0.26 contain a critical vulnerability allowing arbitrary file uploads due to an incomplete patch for CVE-2018-12426.

Understanding CVE-2019-11185

This CVE identifies a security flaw in the WP Live Chat Support Pro plugin for WordPress that enables unauthorized file uploads.

What is CVE-2019-11185?

The vulnerability in WP Live Chat Support Pro plugin versions up to 8.0.26 allows for arbitrary file uploads by exploiting incomplete patching from a previous CVE. Attackers can deceive MIME checks by combining non-blacklisted and whitelisted file extensions.

The Impact of CVE-2019-11185

The exploit permits unauthorized remote users to upload malicious files by manipulating MIME checks, potentially leading to remote code execution and compromise of the affected WordPress site.

Technical Details of CVE-2019-11185

The technical aspects of this CVE provide insight into the vulnerability's nature and its potential risks.

Vulnerability Description

The vulnerability arises from incomplete patching for a previous CVE, enabling attackers to upload malicious files by tricking the plugin's MIME check into misclassifying the file type.

Affected Systems and Versions

WP Live Chat Support Pro plugin versions up to 8.0.26 for WordPress

Exploitation Mechanism

Attackers send a specially crafted file upload POST request to the REST API remote_upload endpoint
Deceptive file content tricks the MIME check into categorizing the file as an image, bypassing security measures
The exploit concludes with a trailing .phtml file extension, potentially executing malicious code

Mitigation and Prevention

Protecting systems from CVE-2019-11185 involves immediate actions and long-term security practices.

Immediate Steps to Take

Update WP Live Chat Support Pro plugin to the latest version to patch the vulnerability
Implement strict file upload restrictions and validation checks
Monitor file uploads for suspicious activity

Long-Term Security Practices

Regularly audit and update plugins and themes to address security vulnerabilities
Educate users on safe file upload practices and potential risks
Employ web application firewalls and security plugins to enhance website security

Patching and Updates

Apply security patches promptly to mitigate the risk of arbitrary file uploads and potential exploitation