PT-2022-9589 · Publishpress · Publishpress Capabilities Pro

Krzysztof Zając · Published 2022-01-10 · Updated 2025-06-05 · CVE-2021-25032

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PublishPress Capabilities WordPress plugin versions prior to 2.3.1 PublishPress Capabilities Pro WordPress plugin versions prior to 2.3.1

Description The issue concerns a lack of authorization and CSRF checks when updating plugin settings via the init hook. This allows unauthenticated attackers to update arbitrary blog options, such as the default role, potentially making any new registered user an administrator.

Recommendations For PublishPress Capabilities WordPress plugin versions prior to 2.3.1, update to version 2.3.1 or later. For PublishPress Capabilities Pro WordPress plugin versions prior to 2.3.1, update to version 2.3.1 or later.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2021-25032

Affected Products

Publishpress Capabilities Pro

References · 6

• 🔥 https://wpscan.com/vulnerability/2f0f1a32-0c7a-48e6-8617-e0b2dcf62727 · Exploit
• https://plugins.trac.wordpress.org/changeset/2640161 · Patch
• https://osv.dev/vulnerability/CVE-2021-25032 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25032 · Security Note
• https://t.me/cvenotify/37165 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/1930414274515743031 · Twitter Post