CVE-2024-52447 – This path traversal vulnerability in the WordPr... (How to Fix)

Q: What is the severity of CVE-2024-52447?

CVE-2024-52447 has a CVSS score of 8.6 (HIGH). This path traversal vulnerability in the WordPress 'Contact Page With Google Map' plugin allows attackers to delete arbitrary files on the server using specially crafted directory traversal sequences. It affects all WordPress sites running this plugin from unknown versions through 1.6.1.

📋 TL;DR

This path traversal vulnerability in the WordPress 'Contact Page With Google Map' plugin allows attackers to delete arbitrary files on the server using specially crafted directory traversal sequences. It affects all WordPress sites running this plugin from unknown versions through 1.6.1.

💻 Affected Systems

Products:

Contact Page With Google Map WordPress Plugin

Versions: n/a through 1.6.1

Operating Systems: Any OS running WordPress

Default Config Vulnerable: ⚠️ Yes

Notes: Affects all WordPress installations with vulnerable plugin versions enabled.

⚠️ Manual Verification Required

This CVE does not have specific version information in our database, so automatic vulnerability detection cannot determine if your system is affected.

Why? The CVE database entry doesn't specify which versions are vulnerable (no version ranges provided by the vendor/NVD).

🔒 Custom verification scripts are available for registered users. Sign up free to download automated test scripts.

Recommended Actions:

Review the CVE details at NVD
Check vendor security advisories for your specific version
Test if the vulnerability is exploitable in your environment
Consider updating to the latest version as a precaution

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system compromise via deletion of critical system files, leading to service disruption, data loss, or privilege escalation.

🟠

Likely Case

Website defacement, data deletion, or plugin/theme removal causing site functionality loss.

🟢

If Mitigated

Limited impact if file permissions are restrictive and web server runs with minimal privileges.

🌐 Internet-Facing: HIGH - WordPress plugins are typically internet-facing and this vulnerability requires no authentication.

🏢 Internal Only: MEDIUM - Internal WordPress instances could still be targeted via phishing or compromised internal accounts.

🎯 Exploit Status

Public PoC: ⚠️ Yes

Weaponized: LIKELY

Unauthenticated Exploit: ⚠️ Yes

Complexity: LOW

Exploitation requires sending specially crafted HTTP requests with directory traversal sequences like '.../...//' to bypass filters.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: 1.6.2 or later

Vendor Advisory: https://patchstack.com/database/vulnerability/contact-page-with-google-map/wordpress-contact-page-with-google-map-plugin-1-6-1-arbitrary-file-deletion-vulnerability?_s_id=cve

Restart Required: No

Instructions:

1. Log into WordPress admin panel. 2. Navigate to Plugins → Installed Plugins. 3. Find 'Contact Page With Google Map'. 4. Click 'Update Now' if available. 5. If no update appears, manually download version 1.6.2+ from WordPress.org and replace plugin files.

🔧 Temporary Workarounds

Disable Plugin

all

Temporarily deactivate the vulnerable plugin until patched.

wp plugin deactivate contact-page-with-google-map

Web Application Firewall Rule

all

Block requests containing directory traversal patterns.

Add WAF rule to block requests with patterns like '.../...//', '../', '..\' in URL parameters

🧯 If You Can't Patch

Remove plugin entirely and use alternative contact form solution
Implement strict file permissions (755 for directories, 644 for files) and run web server with minimal privileges

🔍 How to Verify

Check if Vulnerable:

Check WordPress admin → Plugins → Installed Plugins for 'Contact Page With Google Map' version ≤1.6.1.

Check Version:

wp plugin get contact-page-with-google-map --field=version

Verify Fix Applied:

Confirm plugin version is 1.6.2 or higher in WordPress admin panel.

📡 Detection & Monitoring

Log Indicators:

HTTP requests with '.../...//' patterns in URL parameters
File deletion errors in web server logs
Unauthorized file access attempts

Network Indicators:

HTTP POST/GET requests to plugin endpoints with traversal sequences
Unusual file deletion patterns

SIEM Query:

web.url:*.../...//* OR web.url:*../* OR web.url:*..\\*

📊 Metadata

CVE ID: CVE-2024-52447

CVSS v3 Score: 8.6 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE: CWE-35

Published: November 20, 2024

Last Updated: November 21, 2024

🔗 References

https://patchstack.com/database/vulnerability/contact-page-with-google-map/wordpress-contact-page-with-google-map-plugin-1-6-1-arbitrary-file-deletion-vulnerability?_s_id=cve

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-52447, you might also want to check these: