PT-2022-9470 · WordPress · Wordpress Gdpr

0Xspade + 2 · Published 2022-02-01 · Updated 2022-02-07 · CVE-2021-24814

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WordPress GDPR WordPress plugin versions prior to 1.9.26

Description The issue concerns the check privacy settings AJAX action in the WordPress GDPR WordPress plugin. This action is accessible to both unauthenticated and authenticated users and returns JSON data without the correct content-type, which can lead to the interpretation of an HTML payload by a web browser. As a result, JavaScript code may be executed on a victim's browser. If the victim is an administrator with a valid session cookie, an attacker could gain full control of the WordPress instance, including the ability to make AJAX calls and manipulate iframes, due to the vulnerable endpoint being on the same domain as the admin panel.

Recommendations For versions prior to 1.9.26, update to version 1.9.26 or later to resolve the issue. As a temporary workaround, consider restricting access to the check privacy settings AJAX action until the update is applied.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-24814

Affected Products

Wordpress Gdpr

References · 3

• 🔥 https://wpscan.com/vulnerability/94ab34f6-86a9-4e14-bf86-26ff6cb4383e · Exploit
• https://osv.dev/vulnerability/CVE-2021-24814 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24814 · Security Note