CVE-2019-1000031

Description

A disk space or quota exhaustion issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. Visiting PDF generation link but not following the redirect will leave behind a PDF file on disk which will never be deleted by the plug-in.

Affected products

• article2pdf / article2pdf Wordpress plug-in0.24 – 0.24
• article2pdf / article2pdf Wordpress plug-in0.25 – 0.25
• article2pdf / article2pdf Wordpress plug-in0.26 – 0.26
• article2pdf / article2pdf Wordpress plug-in0.27 – 0.27

References

• MAILING_LISThttps://seclists.org/bugtraq/2019/Mar/49
• EXPLOIThttp://packetstormsecurity.com/files/152236/WordPress-article2pdf-0.24-DoS-File-Deletion-Disclosure.html
• MISChttps://wpvulndb.com/vulnerabilities/9246