PT-2024-36666 · Pearlbells · Pearlbells Flash News / Post+1

Mika · Published 2024-12-16 · Updated 2025-01-27 · CVE-2024-56012

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pearlbells Flash News / Post (Responsive) versions n/a through 4.1 Pearlbells Post Title (TypeWriter) versions n/a through 4.1

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability that allows Privilege Escalation. This means an attacker can perform actions on behalf of another user without their knowledge or consent.

Recommendations Pearlbells Flash News / Post (Responsive) versions n/a through 4.1: Update to a version later than 4.1 to fix the issue. Pearlbells Post Title (TypeWriter) versions n/a through 4.1: Update to a version later than 4.1 to fix the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2024-56012

Affected Products

Pearlbells Flash News / Post

Pearlbells Post Title

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-56012 · Security Note
• https://t.me/cvedetector/12988 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/flashnews-typewriter-pearlbells/vulnerability/wordpress-post-title-typewriter-plugin-4-1-csrf-to-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1868687142303445013 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/flashnews-fading-effect-pearlbells/vulnerability/wordpress-flash-news-post-responsive-plugin-4-1-csrf-to-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/CveFindCom/status/1868665861768118616 · Twitter Post
• https://twitter.com/CVEnew/status/1868666560703041684 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/flashnews-fading-effect-pearlbells/vulnerability/wordpress-flash-news-post-responsive-plugin-4-1-csrf-to-privilege-escalation-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/108671 · Telegram Post