PT-2023-16001 · WordPress · Jetwidgets For Elementor

Chloe Chamberland + 1 · Publicado 2023-01-05 · Atualizado 2023-01-11 · CVE-2023-0086

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions JetWidgets for Elementor plugin for WordPress versions up to, and including, 1.0.12

Description The issue is due to missing nonce validation on the save() function, allowing unauthenticated attackers to modify the plugin's settings via a forged request. This can be achieved by tricking a site administrator into performing an action, such as clicking on a link. The vulnerability can be used to enable SVG uploads, potentially leading to Cross-Site Scripting.

Recommendations For versions up to, and including, 1.0.12, update to a version that includes nonce validation on the save() function to prevent Cross-Site Request Forgery attacks. As a temporary workaround, consider restricting access to the plugin's settings to minimize the risk of exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-0086

Produtos afetados

Jetwidgets For Elementor

Referências · 8

• https://plugins.trac.wordpress.org/browser/jetwidgets-for-elementor/trunk/includes/class-jet-widgets-settings.php#L149 · Correção
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2846332%40jetwidgets-for-elementor&new=2846332%40jetwidgets-for-elementor&sfp_email=&sfph_mail= · Nota
• https://osv.dev/vulnerability/CVE-2023-0086 · Aviso do Fabricante
• https://wordfence.com/threat-intel/vulnerabilities/id/8de3d3c7-bde2-4455-8d60-20307f0a53ee?source=cve · Nota
• https://t.me/cibsecurity/55991 · Publicação no Telegram
• https://t.me/cvenotify/41356 · Publicação no Telegram
• https://wordfence.com/threat-intel/vulnerabilities/id/8de3d3c7-bde2-4455-8d60-20307f0a53ee · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-0086 · Nota de Segurança