PT-2023-11871 · WordPress · 2J-Slideshow Plugin

Jerome Bruandet · CVE-2020-36729 · Publicado 2023-06-07 · Atualizado 2023-06-13

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions 2J-SlideShow Plugin for WordPress versions up to, and including, 1.3.31

Description The issue is related to authorization bypass due to a missing capability check on the twoj slideshow setup function. This function is called via the "wp ajax twoj slideshow setup" AJAX action. As a result, authenticated attackers with Subscriber or above level access can perform restricted actions and deactivate any plugins on the blog.

Recommendations For 2J-SlideShow Plugin for WordPress versions up to, and including, 1.3.31, update to a version higher than 1.3.31 to resolve the issue. As a temporary workaround, consider restricting access to the twoj slideshow setup function and the "wp ajax twoj slideshow setup" AJAX action to prevent exploitation.

Exploit

Correção

Missing Authorization

Improper Authorization

Enumeração de Fraquezas

CWE-862

CWE-285

Identificadores relacionados

CVE-2020-36729

Produtos afetados

2J-Slideshow Plugin

Referências · 6

• 🔥 https://blog.nintechnet.com/wordpress-2j-slideshow-plugin-fixed-authenticated-arbitrary-plugin-deactivation-vulnerability · Exploit
• https://acunetix.com/vulnerabilities/web/wordpress-plugin-images-slideshow-by-2j-image-slider-security-bypass-1-3-31 · Nota
• https://osv.dev/vulnerability/CVE-2020-36729 · Aviso do Fabricante
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2226528%402j-slideshow&new=2226528%402j-slideshow&sfp_email=&sfph_mail= · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2020-36729 · Nota de Segurança
• https://wordfence.com/threat-intel/vulnerabilities/id/f06d1b9e-e27d-4c43-a69b-7641518e4615?source=cve · Nota