/home/smartonegroup/mail/new/1734447985.M399106P9591.server12.hhost.eg,S=22311,W=22791
Envelope-to: security@veroserv.com
Delivery-date: Tue, 17 Dec 2024 15:06:25 +0000
Date: Tue, 17 Dec 2024 15:05:42 +0000
To: Mahmoud Mansour <security@veroserv.com>
From: WPSec <info@wpsec.com>
Reply-To: WPSec <info@wpsec.com>
Subject: The Full Story of CVE-2024-6386: Remote Code Execution in WPML
Message-ID: <01020193d5274ce7-2ef4ae60-f480-4b47-9bb2-457ce3739455-000000@eu-west-1.amazonses.com>
Precedence: Bulk
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="b1_03d68e5eca55af505c58b6142e679cf0"
Content-Transfer-Encoding: 8bit
Feedback-ID: ::1.eu-west-1.eSJETNozm/e7Ytjcl0mM1iuu6GJzIHvhIum9UjoyDPY=:AmazonSES

This is a multi-part message in MIME format.

--b1_03d68e5eca55af505c58b6142e679cf0
Content-Type: text/plain; charset=us-ascii

WPSec.com - Automated WordPress Security Scans
2024-December WordPress Security Newsletter

# The Full Story of CVE-2024-6386: Remote Code Execution in WPML: 


The WordPress Multilingual Plugin (WPML), with over 1,000,000 active installations, was vulnerable to Remote Code Execution (RCE) via a Server-Side Template Injection (SSTI) vulnerability in the Twig template engine. WPML is a premium plugin that provides automatic language translations to build multilingual websites, enabling users to view web pages in different languages.

Read more here: https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/9EP03WWzij2e3KAskx3ysw/Xz6oW7S3AjgNen2zvup4tw

Regards,
WPSec


--b1_03d68e5eca55af505c58b6142e679cf0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html lang="en">
<head>
	<title>WPSec.com - Automated WordPress Scans</title>
	<meta charset="utf-8" /><meta name="viewport" content="width=device-width" />
	<style type="text/css">/* CLIENT-SPECIFIC STYLES */
      #outlook a {
        padding: 0;
      } /* Force Outlook to provide a "view in browser" message */
      .ReadMsgBody {
        width: 100%;
      }
      .ExternalClass {
        width: 100%;
      } /* Force Hotmail to display emails at full width */
      .ExternalClass,
      .ExternalClass p,
      .ExternalClass span,
      .ExternalClass font,
      .ExternalClass td,
      .ExternalClass div {
        line-height: 100%;
      } /* Force Hotmail to display normal line spacing */
      body,
      table,
      td,
      a {
        -webkit-text-size-adjust: 100%;
        -ms-text-size-adjust: 100%;
      } /* Prevent WebKit and Windows mobile changing default text sizes */
      table,
      td {
        mso-table-lspace: 0pt;
        mso-table-rspace: 0pt;
      } /* Remove spacing between tables in Outlook 2007 and up */
      img {
        -ms-interpolation-mode: bicubic;
      } /* Allow smoother rendering of resized image in Internet Explorer */

      /* RESET STYLES */
      body {
        margin: 0;
        padding: 0;
      }
      img {
        border: 0;
        height: auto;
        line-height: 100%;
        outline: none;
        text-decoration: none;
      }
      table {
        border-collapse: collapse !important;
        border: none;
      }
      body {
        height: 100% !important;
        margin: 0;
        padding: 0;
        width: 100% !important;
      }

      /* iOS BLUE LINKS */
      .appleBody a {
        color: #68440a;
        text-decoration: none;
      }
      .appleFooter a {
        color: #999999;
        text-decoration: none;
      }

      h1,h2,h3 {
        color: #000000;
        font-weight: normal;
      }

      /* MOBILE STYLES */
      @media screen and (max-width: 525px) {
        /* ALLOWS FOR FLUID TABLES */
        table[class="wrapper"] {
          width: 100% !important;
        }

        /* ADJUSTS LAYOUT OF LOGO IMAGE */
        td[class="logo"] {
          text-align: left;
          padding: 20px 0 20px 0 !important;
        }

        td[class="logo"] img {
          margin: 0 auto !important;
        }

        /* USE THESE CLASSES TO HIDE CONTENT ON MOBILE */
        td[class="mobile-hide"] {
          display: none;
        }

        img[class="mobile-hide"] {
          display: none !important;
        }

        img[class="img-max"] {
          max-width: 100% !important;
          height: auto !important;
        }

        /* FULL-WIDTH TABLES */
        table[class="responsive-table"] {
          width: 100% !important;
        }

        /* UTILITY CLASSES FOR ADJUSTING PADDING ON MOBILE */
        td[class="padding"] {
          padding: 10px 5% 15px 5% !important;
        }

        td[class="padding-copy"] {
          padding: 10px 5% 10px 5% !important;
          text-align: center;
        }

        td[class="padding-meta"] {
          padding: 30px 5% 0px 5% !important;
          text-align: center;
        }

        td[class="no-pad"] {
          padding: 0 0 20px 0 !important;
        }

        td[class="no-padding"] {
          padding: 0 !important;
        }

        td[class="section-padding"] {
          padding: 50px 15px 50px 15px !important;
        }

        /* ADJUST BUTTONS ON MOBILE */
        td[class="mobile-wrapper"] {
          padding: 10px 5% 15px 5% !important;
        }

        table[class="mobile-button-container"] {
          margin: 0 auto;
          width: 100% !important;
        }

        a[class="mobile-button"] {
          width: 80% !important;
          padding: 15px !important;
          border: 0 !important;
          font-size: 16px !important;
        }
      }
	</style>
</head>
<body data-gr-ext-installed="" data-new-gr-c-s-check-loaded="14.1213.0" style="margin: 0; padding: 0;"><!-- HEADER -->
<table border="0" cellpadding="0" cellspacing="0" width="100%">
	<tbody>
		<tr>
			<td bgcolor="#ffffff">
			<div align="center" style="padding: 0px 15px 0px 15px;">
			<table border="0" cellpadding="0" cellspacing="0" class="wrapper" width="500"><!-- LOGO/PREHEADER TEXT -->
				<tbody>
					<tr>
						<td class="logo" style="padding: 20px 0px 30px 0px;">
						<table border="0" cellpadding="0" cellspacing="0" width="100%">
							<tbody>
								<tr>
									<td align="left" bgcolor="#ffffff" width="100"><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/nTxeYYIxlMfH7qgXzqUl9Q/Xz6oW7S3AjgNen2zvup4tw" target="_blank"><img alt="WPSec WordPress Security Newsletter" src="https://list.wpsec.com/uploads/1581943850.png" style="display: block; font-family: Helvetica, Arial, sans-serif; color: rgb(102, 102, 102); font-size: 16px; border-width: 0px; border-style: solid; height: 78px;" /></a></td>
									<td align="right" bgcolor="#ffffff" class="mobile-hide" width="400">
									<table border="0" cellpadding="0" cellspacing="0">
										<tbody>
											<tr>
												<td align="right" style="padding: 0 0 5px 0; font-size: 14px; font-family: Arial, sans-serif; color: #666666; text-decoration: none;">
												<p><span style="color: #666666; text-decoration: none;"><strong>WPSec.com - Automated WordPress Security Scans</strong></span><br />
												2024-December</p>

												<p><span style="color: #666666; text-decoration: none;">WordPress Security Newsletter</span></p>
												</td>
											</tr>
										</tbody>
									</table>
									</td>
								</tr>
							</tbody>
						</table>
						</td>
					</tr>
				</tbody>
			</table>
			</div>
			</td>
		</tr>
	</tbody>
</table>
<!-- ONE COLUMN SECTION -->

<table cellpadding="0" cellspacing="0" width="100%">
	<tbody>
		<tr>
			<td align="center" bgcolor="#ffffff" class="section-padding" style="padding: 15px 15px 70px 15px;">
			<table cellpadding="0" cellspacing="0" class="responsive-table" width="500">
				<tbody>
					<tr>
						<td>
						<table border="0" cellpadding="0" cellspacing="0" width="100%">
							<tbody>
								<tr>
									<td><!-- COPY -->
									<table border="0" bordercolor="#ccc" cellpadding="5" cellspacing="0" style="border-collapse:collapse;" width="100%">
										<tbody>
											<tr>
												<td class="padding-copy" style="padding: 0px; font-size: 16px; line-height: 25px;">
												<p itemprop="headline" style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif; text-align: right;"><!-- wp:paragraph --></p>
												<a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/9EP03WWzij2e3KAskx3ysw/Xz6oW7S3AjgNen2zvup4tw"><img alt="The Full Story of CVE-2024-6386: Remote Code Execution in WPML" src="https://list.wpsec.com/uploads/1734422255.png" style="width: 456px; height: 456px;" /></a>

												<p><!-- wp:paragraph --></p>

												<p><!-- wp:paragraph --></p>

												<p><span style="font-family:Helvetica;">The WordPress Multilingual Plugin (WPML), with over 1,000,000 active installations, was vulnerable to Remote Code Execution (RCE) via a Server-Side Template Injection (SSTI) vulnerability in the Twig template engine. WPML is a premium plugin that provides automatic language translations to build multilingual websites, enabling users to view web pages in different languages.</span><!-- /wp:paragraph --></p>

												<p><!-- /wp:paragraph --></p>

												<p><!-- /wp:paragraph --></p>

												<p><!-- /wp:paragraph --></p>

												<p><!-- /wp:paragraph --></p>

												<p itemprop="headline" style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif; text-align: center;">&nbsp;</p>

												<p style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif; text-align: center;"><span style="font-size:24px;"><strong><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/9EP03WWzij2e3KAskx3ysw/Xz6oW7S3AjgNen2zvup4tw" style="text-decoration:none !important; text-decoration:none;" target="_blank"><span style="color:#ffffff;"><span style="background-color:#db4242; padding: 15px;">Read the blog post &gt;</span></span></a></strong></span></p>

												<p style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif; text-align: center;">&nbsp;</p>

												<h2 style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif;"><strong><span style="font-family:Helvetica Neue;"><span style="text-align: center;">Product Updates</span></span></strong></h2>

												<p><span style="font-family:Helvetica Neue;"><span style="text-align: center;">The&nbsp;new Premium features include:</span></span></p>

												<p><span style="font-family:Helvetica;">✅&nbsp;<strong>Extensive scan</strong>&nbsp;- You can now do a more in-depth scanning using the active scan setting. More requests but better results when it comes to finding plugins</span></p>

												<p>&nbsp;<span style="font-family:Helvetica;">✅&nbsp;<strong>Web Application Firewall (WAF)&nbsp;Bypass</strong>&nbsp;- New settings allow you to scan from randomized IP addresses and random HTTP user-agent header</span></p>

												<p><span style="font-family:Helvetica;">&nbsp;✅&nbsp;<strong>REST API</strong>&nbsp;- With the brand new API, you can add websites/blogs, fetch reports, and more (<a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/qF4jidBWigDiyewluIn763dA/Xz6oW7S3AjgNen2zvup4tw">docs</a>). Also the brand new <a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/fvZ8UJzZ8RvR892GQqX4QgxA/Xz6oW7S3AjgNen2zvup4tw">wpsec-cli</a> can be used</span></p>

												<h2 style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif;"><span style="font-family:Helvetica Neue;"><strong><span style="text-align: center;">Blog updates</span></strong></span></h2>

												<ul style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif;">
													<li>
													<p itemprop="headline"><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/4uMhtqX892CYiFjLe9bHWHPw/Xz6oW7S3AjgNen2zvup4tw">98.7 Percent of the Web Is Using Outdated Versions of PHP</a></p>
													</li>
													<li>
													<p itemprop="headline"><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/XcxtqMTbfQbgQln8WDKsew/Xz6oW7S3AjgNen2zvup4tw">WordPress and Trojan Source</a></p>
													</li>
													<li>
													<p itemprop="headline"><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/4lhElOID31r31ZL77CuD8w/Xz6oW7S3AjgNen2zvup4tw" target="_blank">WordPress plugin WP File Manager actively exploited</a></p>
													</li>
												</ul>

												<h2 style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif;"><strong><span style="font-family:Helvetica Neue;">Follow us</span></strong></h2>

												<p style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif;"><img alt="" src="https://list.wpsec.com/uploads/1599482078.jpg" style="float: right; width: 100px; height: 62px;" />Receive faster updates if you follow us on LinkedIn, Twitter or Facebook:</p>

												<ul style="color: rgb(102, 102, 102); font-family: Helvetica, Arial, sans-serif;">
													<li><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/NU5PeaFH892HzNAzmgOOH61A/Xz6oW7S3AjgNen2zvup4tw">www.linkedin.com/company/wpsec</a></li>
													<li><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/zFZlhA74e2PHQcrJIf6usg/Xz6oW7S3AjgNen2zvup4tw">twitter.com/wpsecscanner</a></li>
													<li><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/QiEpsXF763Mb9mJtGeJQUH4Q/Xz6oW7S3AjgNen2zvup4tw">facebook.com/wpsecscanner</a></li>
												</ul>
												</td>
											</tr>
										</tbody>
									</table>
									</td>
								</tr>
							</tbody>
						</table>
						</td>
					</tr>
				</tbody>
			</table>
			</td>
		</tr>
	</tbody>
</table>
<!-- ONE COLUMN W/ BOTTOM IMAGE SECTION -->

<table border="0" cellpadding="0" cellspacing="0" width="100%">
	<tbody>
		<tr>
			<td align="center" bgcolor="#f8f8f8" style="padding: 70px 15px 70px 15px;">
			<table border="0" cellpadding="0" cellspacing="0" class="responsive-table" width="500">
				<tbody>
					<tr>
						<td>
						<table border="0" cellpadding="0" cellspacing="0" width="100%">
							<tbody>
								<tr>
									<td><!-- COPY -->
									<table border="0" cellpadding="0" cellspacing="0" width="100%">
										<tbody>
											<tr>
												<td align="center" class="padding-copy" style="padding: 0 0 0 0; font-size: 16px; line-height: 25px; font-family: Helvetica, Arial, sans-serif; color: #666666;"><strong><em>WordPress Cyber Security our DNA</em></strong></td>
											</tr>
										</tbody>
									</table>
									</td>
								</tr>
							</tbody>
						</table>
						</td>
					</tr>
				</tbody>
			</table>
			</td>
		</tr>
	</tbody>
</table>
<!-- FOOTER -->

<table border="0" cellpadding="0" cellspacing="0" width="100%">
	<tbody>
		<tr>
			<td align="center" bgcolor="#ffffff">
			<table align="center" border="0" cellpadding="0" cellspacing="0" width="100%">
				<tbody>
					<tr>
						<td align="center" style="padding: 20px 0px 0px 0px;"><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/nTxeYYIxlMfH7qgXzqUl9Q/Xz6oW7S3AjgNen2zvup4tw" target="_blank"><img alt="Logo" border="0" height="25.44" src="https://list.wpsec.com/uploads/1582528888.png" style="display: block; font-family: Helvetica, Arial, sans-serif; color: #666666; font-size: 16px;" width="100" /></a></td>
					</tr>
					<tr>
						<td style="padding: 10px 0px 20px 0px;"><!-- UNSUBSCRIBE COPY -->
						<table align="center" border="0" cellpadding="0" cellspacing="0" class="responsive-table" width="500">
							<tbody>
								<tr>
									<td align="center" style="font-size: 12px; line-height: 18px; font-family: Helvetica, Arial, sans-serif; color:#666666;" valign="middle"><span class="appleFooter" style="color:#666666;"><a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/nTxeYYIxlMfH7qgXzqUl9Q/Xz6oW7S3AjgNen2zvup4tw" style="color:#333333; text-decoration: none;" target="_blank">WPSec.com</a> - </span><span style="color: #666666; text-decoration: none;">Automated WordPress Security Scans</span><br />
									<span class="appleFooter" style="color:#666666;">Follow us for updates on <a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/NU5PeaFH892HzNAzmgOOH61A/Xz6oW7S3AjgNen2zvup4tw">LinkedIn</a>,&nbsp;<a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/zFZlhA74e2PHQcrJIf6usg/Xz6oW7S3AjgNen2zvup4tw" style="text-decoration: none;" target="_blank">Twitter</a>, <a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/FxqZNVLXpZdqRVuyYxZOow/Xz6oW7S3AjgNen2zvup4tw" style="text-decoration: none;" target="_blank">Facebook</a> or <a href="https://list.wpsec.com/l/mlQgU2kNYm8IJK03RcBYUw/0NOb2HxPE1QLbWfVqy8rmg/Xz6oW7S3AjgNen2zvup4tw" style="text-decoration: none;" target="_blank">Instagram</a><br />
									<br />
									<a href="https://list.wpsec.com/unsubscribe/xxbnPHtJnbvjdrIF3fp892xzEBnfNyyENZqoVPxB4n5KI/hmz4cs892p56MHa44892hgPlzQ/Xz6oW7S3AjgNen2zvup4tw" style="text-decoration: none;">Unsubscribe</a><span style="font-family: Arial, sans-serif; font-size: 12px; color: #444444;">&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;</span><a href="https://list.wpsec.com/w/mlQgU2kNYm8IJK03RcBYUw/hmz4cs892p56MHa44892hgPlzQ/Xz6oW7S3AjgNen2zvup4tw" style="text-decoration: none;">View this email in your browser</a> </span></td>
								</tr>
							</tbody>
						</table>
						</td>
					</tr>
				</tbody>
			</table>
			</td>
		</tr>
	</tbody>
</table>
<grammarly-desktop-integration data-grammarly-shadow-root="true"></grammarly-desktop-integration>

<p>&nbsp;</p>

<p>&nbsp;</p>

<p>&nbsp;</p>
</body>
</html>



--b1_03d68e5eca55af505c58b6142e679cf0--