PT-2021-16357 · WordPress · Advanced Forum

Suppawit Punhakit · Published 2021-11-23 · Updated 2021-11-29 · CVE-2021-24892

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Advanced Forms (Free & Pro) versions prior to 1.6.9

Description: The issue allows an authenticated remote attacker to change arbitrary user's email address and request a reset password, potentially leading to the takeover of a WordPress administrator account. To exploit this, an attacker must first register to obtain a valid WordPress user account and then use this account to authenticate with WordPress and exploit the vulnerable edit function.

Recommendations: For versions prior to 1.6.9, update to version 1.6.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the edit function in Advanced Forms until the update can be applied. Additionally, monitor user account activity for suspicious email address changes and password reset requests.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2021-24892

Affected Products

Advanced Forum

References · 6

• 🔥 https://wpscan.com/vulnerability/364b0843-a990-4204-848a-60c928cc5bc0 · Exploit
• https://github.com/advancedforms/advanced-forms/commit/2ce3ab6985c3a909eefb01c562995bc6a994d3a2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-24892 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24892 · Vendor Advisory
• https://t.me/cibsecurity/32870 · Telegram Post
• https://t.me/cvenotify/23912 · Telegram Post