PT-2022-9552 · WordPress · The Ultimate Product Catalog

Krzysztof Zając · Published 2022-02-07 · Updated 2022-10-25 · CVE-2021-24993

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions The Ultimate Product Catalog WordPress plugin versions prior to 5.0.26

Description The issue is related to the lack of authorization and CSRF checks in some AJAX actions. This could allow any authenticated users, such as subscribers, to call these actions and add arbitrary products or change the plugin's settings.

Recommendations For versions prior to 5.0.26, update to version 5.0.26 or later to resolve the issue. As a temporary workaround, consider restricting access to the AJAX actions that are missing authorization and CSRF checks until a patch is available.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2021-24993

Affected Products

The Ultimate Product Catalog

References · 6

• 🔥 https://wpscan.com/vulnerability/514416fa-d915-4953-bf1b-6dbf40b4d7e5 · Exploit
• https://plugins.trac.wordpress.org/changeset/2650578 · Patch
• https://osv.dev/vulnerability/CVE-2021-24993 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-24993 · Security Note
• https://t.me/cvenotify/26758 · Telegram Post
• https://t.me/cibsecurity/36943 · Telegram Post