PT-2024-30951 · WordPress · Ignitiondeck Crowdfunding Platform

Marco Wotschka · Published 2024-07-27 · Updated 2024-07-29 · CVE-2024-4410

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions IgnitionDeck Crowdfunding Platform plugin for WordPress versions up to, and including, 1.9.8

Description The issue is due to missing capability checks on various functions called via AJAX actions in the ~/classes/class-idf-wizard.php file. This allows authenticated attackers, with subscriber access or higher, to execute various AJAX actions, including changing the permalink structure and plugin settings.

Recommendations For versions up to, and including, 1.9.8, update to a version that includes the necessary capability checks to prevent unauthorized access to AJAX actions. As a temporary workaround, consider restricting access to the ~/classes/class-idf-wizard.php file to minimize the risk of exploitation.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-4410

Affected Products

Ignitiondeck Crowdfunding Platform

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-4410 · Security Note
• https://plugins.trac.wordpress.org/browser/ignitiondeck/trunk/classes/class-idf-wizard.php#L1162 · Note
• https://t.me/cvedetector/1746 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/07b6aad4-fbaf-4c0c-b2b7-6e264a1afb9b?source=cve · Note
• https://plugins.trac.wordpress.org/browser/ignitiondeck/trunk/classes/class-idf-wizard.php#L186 · Note
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3134431%40ignitiondeck%2Ftrunk&old=3097520%40ignitiondeck%2Ftrunk&sfp_email=&sfph_mail= · Note
• https://t.me/cvenotify/87633 · Telegram Post