PT-2023-25547 · WordPress · Wp Project Manager

Chloe Chamberland + 2 · Published 2023-08-31 · Updated 2023-09-05 · CVE-2023-3636

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WP Project Manager plugin for WordPress versions up to, and including, 2.6.4

Description The issue allows authenticated attackers with minimal permissions, such as a subscriber, to modify their user role. This is possible due to insufficient restriction on the save users map name function, which can be exploited by supplying the usernames parameter.

Recommendations For WP Project Manager plugin for WordPress versions up to, and including, 2.6.4, consider disabling the save users map name function until a patch is available to prevent privilege escalation. Restrict access to the usernames parameter in the affected function to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2023-3636

Affected Products

Wp Project Manager

References · 6

• https://osv.dev/vulnerability/CVE-2023-3636 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3636 · Security Note
• https://plugins.trac.wordpress.org/changeset/2942291/wedevs-project-manager#file1792 · Patch
• https://wordfence.com/threat-intel/vulnerabilities/id/6a5e4708-db3e-483c-852f-1a487825cf92?source=cve · Note
• https://plugins.trac.wordpress.org/browser/wedevs-project-manager/tags/2.6.3/src/User/Controllers/User_Controller.php#L158 · Note
• https://t.me/cibsecurity/69525 · Telegram Post