PT-2023-18341 · WordPress · Badgeos
Alex Thomas
·
Published
2023-08-31
·
Updated
2023-09-01
·
CVE-2023-2173
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
BadgeOS plugin for WordPress versions up to, and including, 3.7.1.6
Description
The issue is due to improper validation and authorization checks within the (badgeos delete step ajax handler), (badgeos delete award step ajax handler), (badgeos delete deduct step ajax handler), and (badgeos delete rank req step ajax handler) functions. This allows authenticated attackers with subscriber-level permissions and above to delete arbitrary posts.
Recommendations
For BadgeOS plugin for WordPress versions up to, and including, 3.7.1.6, consider disabling the (badgeos delete step ajax handler), (badgeos delete award step ajax handler), (badgeos delete deduct step ajax handler), and (badgeos delete rank req step ajax handler) functions until a patch is available to prevent exploitation.
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Badgeos