PT-2024-22175 · Mailerlite · Mailerlite – Signup Forms

Krzysztof Zając · Published 2024-05-02 · Updated 2024-05-02 · CVE-2024-2797

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions MailerLite – Signup forms (official) plugin for WordPress versions up to, and including, 1.7.6

Description The issue allows unauthorized plugin setting changes due to a missing capability check on the toggleRolesAndPermissions and editAllowedRolesAndPermissions functions. This makes it possible for unauthenticated attackers to allow lower level users to modify forms.

Recommendations For MailerLite – Signup forms (official) plugin for WordPress versions up to, and including, 1.7.6, update to a version higher than 1.7.6 to resolve the issue. As a temporary workaround, consider restricting access to the toggleRolesAndPermissions and editAllowedRolesAndPermissions functions until a patch is available.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-2797

Affected Products

Mailerlite – Signup Forms

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-2797 · Security Note
• https://twitter.com/CVEnew/status/1786082075541426547 · Twitter Post
• https://plugins.trac.wordpress.org/changeset/3070584/official-mailerlite-sign-up-forms/trunk?contextall=1&old=3045803&old_path=%2Fofficial-mailerlite-sign-up-forms%2Ftrunk · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/a03b4c19-85fa-47ad-b9ae-b466f8e5ca96?source=cve · Note
• https://plugins.trac.wordpress.org/browser/official-mailerlite-sign-up-forms/trunk/src/Admin/Actions.php#L41 · Note