PT-2023-16592 · WordPress · Themeflection Numbers

Dc11 · Publicado 2023-04-17 · Atualizado 2023-04-25 · CVE-2023-0889

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Themeflection Numbers WordPress plugin versions prior to 2.0.1

Description The issue is related to a lack of authorisation and CSRF check in an AJAX action, which does not ensure that the options to be updated belong to the plugin. This could allow any authenticated users, such as subscribers, to update arbitrary blog options, including enabling registration and setting the default role to administrator.

Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the AJAX action or disabling it until a patch is available. Additionally, restrict the ability of subscribers to update blog options to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2023-0889

Produtos afetados

Themeflection Numbers

Referências · 7

• 🔥 https://wpscan.com/vulnerability/c39473a7-47fc-4bce-99ad-28d03f41e74e · Exploit
• https://t.me/cvenotify/48408 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0889 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-0889 · Aviso do Fabricante
• https://t.me/cvenotify/49062 · Publicação no Telegram
• https://t.me/cvenotify/48427 · Publicação no Telegram
• https://t.me/cibsecurity/62285 · Publicação no Telegram