PT-2022-24165 · WordPress · Jeg Elementor Kit

Ram + 1 · Published 2022-12-22 · Updated 2022-12-30 · CVE-2022-3794

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jeg Elementor Kit plugin for WordPress versions up to, and including, 2.5.6

Description The issue concerns an authorization bypass in various AJAX actions. Authenticated users can exploit an easily available nonce value to create header templates and make additional changes to the site, due to the plugin's lack of capability checks for this purpose.

Recommendations For versions up to, and including, 2.5.6, update to a version that addresses the authorization bypass issue to prevent exploitation. As a temporary workaround, consider restricting access to the AJAX actions that are vulnerable to authorization bypass until a patch is available.

Exploit

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2022-3794

Affected Products

Jeg Elementor Kit

References · 7

• 🔥 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail= · Exploit
• https://osv.dev/vulnerability/CVE-2022-3794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3794 · Security Note
• https://t.me/cibsecurity/55200 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/84b616fa-ff64-49e8-8c4a-7d7bfdf758be?source=cve · Note
• https://wordpress.org/plugins/jeg-elementor-kit/#developers · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/84b616fa-ff64-49e8-8c4a-7d7bfdf758be · Note