PT-2024-13436 · WordPress · Ladiapp

Giongfnef · Published 2024-03-12 · Updated 2025-01-15 · CVE-2023-4729

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions LadiApp plugin for WordPress versions up to, and including, 4.4

Description The issue is related to a missing nonce check on the publish lp() function, which is hooked via an AJAX action. This allows unauthenticated attackers to change the LadiPage key, enabling them to create new pages, including those that trigger stored XSS via a forged request, if they can trick a site administrator into performing a certain action, such as clicking on a link.

Recommendations For versions up to, and including, 4.4, consider disabling the publish lp() function until a patch is available to prevent exploitation. Restrict access to the AJAX action hooked by the publish lp() function to minimize the risk of exploitation. Avoid using the LadiApp plugin until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-4729

Affected Products

Ladiapp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-4729 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4729 · Vendor Advisory
• https://t.me/cvenotify/73549 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1767529566778658961 · Twitter Post
• https://twitter.com/CVEnew/status/1767488871128789393 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/db707507-c53f-45b8-a8e1-7fea1c6f8f3c?source=cve · Note
• https://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L1992 · Note