PT-2023-27024 · WordPress · Acf Photo Gallery Field

István Márton + 1 · Published 2023-07-27 · Updated 2023-08-02 · CVE-2023-3957

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ACF Photo Gallery Field plugin for WordPress versions up to, and including, 1.9

Description The issue allows authenticated attackers with subscriber-level permissions or above to modify data unauthorizedly due to insufficient restrictions on the apg profile update function. This enables them to update user metas arbitrarily, with the meta value limited to a string.

Recommendations For versions up to, and including, 1.9, consider disabling the apg profile update function until a patch is available to prevent unauthorized modification of user metas. Restrict access to user meta updates to minimize the risk of exploitation.

Fix

Incorrect Authorization

Improper Authorization

Weakness Enumeration

CWE-863

CWE-285

Related Identifiers

CVE-2023-3957

Affected Products

Acf Photo Gallery Field

References · 7

• https://plugins.trac.wordpress.org/browser/navz-photo-gallery/tags/1.9/includes/acf_photo_gallery_save.php#L42 · Patch
• https://osv.dev/vulnerability/CVE-2023-3957 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3957 · Security Note
• https://plugins.trac.wordpress.org/changeset/2943404/navz-photo-gallery#file0 · Patch
• https://t.me/cvenotify/55305 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/689511e0-1355-4fcb-8a72-d819abc8e9a3?source=cve · Note
• https://t.me/cvenotify/55293 · Telegram Post