PT-2022-9537 · WordPress · The Ultimate Faq

Krzysztof Zając · Published 2022-01-24 · Updated 2022-10-25 · CVE-2021-24968

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions The Ultimate FAQ WordPress plugin versions prior to 2.1.2

Description The issue concerns the lack of capability and CSRF checks in the ewd ufaq welcome add faq and ewd ufaq welcome add faq page AJAX actions. This allows any authenticated user, even those with a role as low as Subscriber, to create FAQs and FAQ questions.

Recommendations For versions prior to 2.1.2, update to version 2.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the ewd ufaq welcome add faq and ewd ufaq welcome add faq page AJAX actions to prevent unauthorized creation of FAQs and FAQ questions.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2021-24968

Affected Products

The Ultimate Faq

References · 5

• 🔥 https://wpscan.com/vulnerability/f0a9e6cc-46cc-4ac2-927a-c006b8e8aa68 · Exploit
• https://plugins.trac.wordpress.org/changeset/2648562 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-24968 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24968 · Vendor Advisory
• https://t.me/cibsecurity/36110 · Telegram Post