PT-2022-7141 · WordPress · Wordpress Gdpr Plugin

0Xspade + 2 · Published 2022-01-26 · Updated 2023-07-04 · CVE-2022-0220

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions WordPress GDPR plugin versions prior to 1.9.27

Description The issue concerns the check privacy settings AJAX action in the WordPress GDPR plugin, which is accessible to both unauthenticated and authenticated users. This action responds with JSON data without the proper "application/json" content-type, and since the HTML payload is not properly escaped, it may be interpreted by a web browser, potentially leading to the execution of JavaScript code on a victim's browser. The vulnerability can be exploited against unauthenticated users due to the introduction of a CSRF check in version 1.9.26, which affects all unauthenticated users as they share the same nonce.

Recommendations For versions prior to 1.9.27, update to version 1.9.27 or later to resolve the issue. As a temporary workaround, consider restricting access to the check privacy settings AJAX action to minimize the risk of exploitation.

Exploit

Fix

Improper Encoding or Escaping of Output

XSS

Weakness Enumeration

CWE-116

CWE-79

Related Identifiers

BDU:2023-07852

CVE-2022-0220

Affected Products

Wordpress Gdpr Plugin

References · 4

• 🔥 https://wpscan.com/vulnerability/a91a01b9-7e36-4280-bc50-f6cff3e66059 · Exploit
• https://bdu.fstec.ru/vul/2023-07852 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0220 · Security Note