PT-2023-22457 · WordPress · Wordapp

István Márton + 1 · Published 2023-05-31 · Updated 2023-06-06 · CVE-2023-2987

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wordapp plugin for WordPress versions up to, and including, 1.5.0

Description The issue is related to an authorization bypass due to the use of an insufficiently unique cryptographic signature on the wa pdx op config set function. This allows unauthenticated attackers to change the validation token in the plugin config, providing access to remote control functionalities, such as creating an admin access URL for privilege escalation.

Recommendations For Wordapp plugin for WordPress versions up to, and including, 1.5.0, update to a version higher than 1.5.0 to resolve the issue. As a temporary workaround, consider disabling the wa pdx op config set function until a patch is available. Restrict access to the plugin's remote control functionalities to minimize the risk of exploitation.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2023-2987

Affected Products

Wordapp

References · 8

• https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/pdx.php#L64 · Patch
• https://osv.dev/vulnerability/CVE-2023-2987 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2987 · Security Note
• https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/config.php#L59 · Patch
• https://plugins.trac.wordpress.org/browser/wordapp/trunk/includes/access.php#L28 · Patch
• https://plugins.trac.wordpress.org/changeset/3063322/wordapp · Note
• https://lana.report/publication/6e779e9a-e0f9-4102-9f0b-ad46e9c4533f · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/80440bfa-4a02-4441-bbdb-52d7dd065a9d?source=cve · Note