PT-2021-15762 · Facebook · Facebook For Wordpress

Chloe Chamberland · Published 2021-04-12 · Updated 2021-04-20 · CVE-2021-24218

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Facebook for WordPress plugin versions prior to 3.0.4

Description: The issue concerns the wp ajax save fbe settings and wp ajax delete fbe settings AJAX actions, which were vulnerable to CSRF due to a lack of nonce protection. Additionally, the settings in the saveFbeSettings function had no sanitization, allowing for script tags to be saved.

Recommendations: For versions prior to 3.0.4, update to version 3.0.4 or later to resolve the issue. As a temporary workaround, consider disabling the wp ajax save fbe settings and wp ajax delete fbe settings AJAX actions until a patch is available. Restrict access to the saveFbeSettings function to minimize the risk of exploitation. Avoid using the settings in the saveFbeSettings function that allow for script tags to be saved until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-24218

Affected Products

Facebook For Wordpress

References · 5

• 🔥 https://wpscan.com/vulnerability/169d21fc-d191-46ff-82e8-9ac887aed8a4 · Exploit
• 🔥 https://wordfence.com/blog/2021/03/two-vulnerabilities-patched-in-facebook-for-wordpress-plugin · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24218 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24218 · Vendor Advisory
• https://t.me/cvenotify/13500 · Telegram Post