PT-2022-14029 · Unknown · Jupiter Theme

Ramuel Gall · Published 2022-05-19 · Updated 2022-06-21 · CVE-2022-1658

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Jupiter Theme versions <= 6.10.1

Description The issue allows arbitrary plugin deletion by any authenticated user, including those with the subscriber role, via the abb remove plugin AJAX action. This action is registered in the plugin-management.php file, enabling any logged-in user to delete installed plugins on the site.

Recommendations For versions <= 6.10.1, consider disabling the abb remove plugin AJAX action until a patch is available to prevent arbitrary plugin deletion. Restrict access to the plugin-management.php file to minimize the risk of exploitation. Avoid using the abb remove plugin action in the affected AJAX endpoint until the issue is resolved.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-1658

Affected Products

Jupiter Theme

References · 5

• 🔥 https://wordfence.com/blog/2022/05/critical-privilege-escalation-vulnerability-in-jupiter-and-jupiterx-premium-themes · Exploit
• https://osv.dev/vulnerability/CVE-2022-1658 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1658 · Security Note
• https://t.me/true_secator/2959 · Telegram Post
• https://t.me/cibsecurity/44293 · Telegram Post