PT-2023-15934 · WordPress · The Flyingpress

Jerome Bruandet · Published 2023-06-07 · Updated 2023-06-13 · CVE-2022-4948

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions The FlyingPress plugin for WordPress versions up to, and including, 3.9.6

Description The issue allows authenticated attackers with subscriber-level permissions and above to bypass authorization and interact with the plugin in unintended ways. This can be exploited through AJAX actions, specifically the "save config" action, which enables configuration of an external CDN. An attacker could use this to include malicious javascript from a source under their control.

Recommendations For The FlyingPress plugin for WordPress versions up to, and including, 3.9.6, update to a version that includes a fix for the missing capability check on its AJAX actions to prevent authorization bypass.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-4948

Affected Products

The Flyingpress

References · 4

• 🔥 https://blog.nintechnet.com/wordpress-flyingpress-plugin-fixed-broken-access-control-vulnerability · Exploit
• https://osv.dev/vulnerability/CVE-2022-4948 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4948 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/6d1d541b-7010-4dbf-9b1c-d59c84390065?source=cve · Note