The Innorix WP plugin contains a critical unrestricted file upload vulnerability that enables remote attackers to execute arbitrary code on the host server.

This is an unrestricted file upload vulnerability (CWE-434) triggered when the exam directory is present within the product installation path. An unauthenticated attacker can leverage this flaw to upload malicious files, such as web shells, directly to the web server.

Successful exploitation of this vulnerability allows an attacker to gain unauthorized remote code execution capabilities on the underlying server. Given the CVSS score of 7.7, this represents a high risk that could lead to full system compromise, data theft, or the establishment of a persistent backdoor within the corporate environment.

Immediate Action: Contact the vendor immediately to obtain the appropriate security update or configuration guidance to secure the installation directory. If no patch is available, restrict access to the web server directory to prevent unauthorized file uploads.

Proactive Monitoring: Monitor web server access logs for suspicious file upload activity or requests targeting the exam directory. Review system integrity logs for the creation of unauthorized executable files or scripts.

Compensating Controls: Implement a Web Application Firewall (WAF) to inspect incoming HTTP requests and block uploads of non-permitted file types. Restrict write permissions on the web server directories to the minimum required level.

Public Exploit Available: No

The vulnerability in Innorix WP poses a significant threat to server integrity and requires immediate attention. Security teams should prioritize identifying all instances of this plugin within their infrastructure and applying vendor-supplied patches as soon as they become available. Until remediation is confirmed, verify that the exam directory is not accessible or writable by unauthorized users to mitigate the risk of immediate exploitation.