PT-2022-9480 · WordPress · Supportcandy

Brandon Roldan + 1 · Published 2022-02-07 · Updated 2022-08-30 · CVE-2021-24839

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SupportCandy WordPress plugin versions prior to 2.2.5

Description The issue is related to the lack of authorisation and CSRF checks in the wpsc tickets AJAX action, which could allow unauthenticated users to delete arbitrary tickets via the set delete permanently bulk ticket setting action. Other actions may also be affected.

Recommendations For versions prior to 2.2.5, update to version 2.2.5 or later to resolve the issue. As a temporary workaround, consider disabling the wpsc tickets AJAX action until a patch is available. Restrict access to the set delete permanently bulk ticket setting action to minimize the risk of exploitation.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-24839

Affected Products

Supportcandy

References · 5

• 🔥 https://wpscan.com/vulnerability/5e6e63c2-2675-4b8d-9b94-c16c525a1a0e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24839 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24839 · Vendor Advisory
• https://t.me/cvenotify/26369 · Telegram Post
• https://t.me/cibsecurity/36945 · Telegram Post