PT-2023-11871 · WordPress · 2J-Slideshow Plugin

Jerome Bruandet · Published 2023-06-07 · Updated 2023-06-13 · CVE-2020-36729

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions 2J-SlideShow Plugin for WordPress versions up to, and including, 1.3.31

Description The issue is related to authorization bypass due to a missing capability check on the twoj slideshow setup function. This function is called via the "wp ajax twoj slideshow setup" AJAX action. As a result, authenticated attackers with Subscriber or above level access can perform restricted actions and deactivate any plugins on the blog.

Recommendations For 2J-SlideShow Plugin for WordPress versions up to, and including, 1.3.31, update to a version higher than 1.3.31 to resolve the issue. As a temporary workaround, consider restricting access to the twoj slideshow setup function and the "wp ajax twoj slideshow setup" AJAX action to prevent exploitation.

Exploit

Fix

Missing Authorization

Improper Authorization

Weakness Enumeration

CWE-862

CWE-285

Related Identifiers

CVE-2020-36729

Affected Products

2J-Slideshow Plugin

References · 6

• 🔥 https://blog.nintechnet.com/wordpress-2j-slideshow-plugin-fixed-authenticated-arbitrary-plugin-deactivation-vulnerability · Exploit
• https://osv.dev/vulnerability/CVE-2020-36729 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2226528%402j-slideshow&new=2226528%402j-slideshow&sfp_email=&sfph_mail= · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-36729 · Security Note
• https://acunetix.com/vulnerabilities/web/wordpress-plugin-images-slideshow-by-2j-image-slider-security-bypass-1-3-31 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/f06d1b9e-e27d-4c43-a69b-7641518e4615?source=cve · Note