PT-2019-7148 · WordPress · Wp Marketplace

Kacper Szurek · Publicado 2019-11-06 · Atualizado 2019-11-08 · CVE-2014-9013

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WP Marketplace plugin version 2.4.0

Description The issue allows remote authenticated users to create arbitrary users and gain admin privileges. This is achieved through the ajaxinit function in wpmarketplace/libs/cart.php by sending a request to "wpmp pp ajax call" with an execution target of wp insert user.

Recommendations For WP Marketplace plugin version 2.4.0, consider disabling the ajaxinit function in wpmarketplace/libs/cart.php as a temporary workaround until a patch is available. Restrict access to the "wpmp pp ajax call" endpoint to minimize the risk of exploitation. Avoid using the wp insert user execution target in the affected endpoint until the issue is resolved.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-9013

Produtos afetados

Wp Marketplace

Referências · 4

• 🔥 https://exploit-db.com/exploits/36490 · Exploit
• 🔥 https://exploit-db.com/exploits/36466 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9013 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-9013 · Nota de Segurança