PT-2024-10843 · WordPress · Indeed Membership Pro

Norman Riffat · Published 2024-10-15 · Updated 2024-10-19 · CVE-2020-36833

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Indeed Membership Pro plugin for WordPress versions 7.3 through 8.6

Description The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions. This makes it possible for an authenticated attacker, with minimal permission, such as a subscriber, to perform a variety of actions, including modifying settings and viewing sensitive data.

Recommendations For versions 7.3 through 8.6, update to a version that includes the necessary capability checks to prevent authorization bypass. As a temporary workaround, consider restricting access to the vulnerable AJAX actions until a patch is available.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2020-36833

Affected Products

Indeed Membership Pro

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2020-36833 · Security Note
• https://twitter.com/transilienceai/status/1847688149578686852 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/ab1cc1ef-d0e0-491d-91a8-eaa0605fc1da?source=cve · Note
• https://twitter.com/transilienceai/status/1846962881042305499 · Twitter Post
• https://wpscan.com/vulnerability/9811025e-ab17-4255-aaaf-4f0306f5d281 · Note
• https://twitter.com/transilienceai/status/1847688155270418450 · Twitter Post
• https://twitter.com/transilienceai/status/1847326413021495653 · Twitter Post
• https://twitter.com/CVEnew/status/1846444809801683221 · Twitter Post