PT-2022-9671 · WordPress · Enqueue Anything

Abhishek Bhoir · Published 2022-06-13 · Updated 2023-07-04 · CVE-2021-25116

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Enqueue Anything WordPress plugin versions 1.0.0 through 1.0.1

Description The issue is related to the lack of authorization and CSRF checks in the remove asset AJAX action. This allows low-privilege users, such as subscribers, to delete arbitrary assets and put arbitrary posts in the trash. The problem also stems from the failure to verify that the item to be deleted is actually an asset.

Recommendations For Enqueue Anything WordPress plugin versions 1.0.0 through 1.0.1, consider disabling the remove asset AJAX action until a patch is available to add proper authorization and CSRF checks. Restrict access to the remove asset function to prevent low-privilege users from exploiting this issue.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2021-25116

Affected Products

Enqueue Anything

References · 4

• 🔥 https://wpscan.com/vulnerability/140a15b6-12c8-4f03-a877-3876db866852 · Exploit
• https://osv.dev/vulnerability/CVE-2021-25116 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25116 · Security Note
• https://t.me/cvenotify/53625 · Telegram Post