PT-2024-37304 · WordPress+1 · Fooevents For Woocommerce+1

István Márton · Published 2024-03-12 · Updated 2024-06-17 · CVE-2024-6000

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FooEvents for WooCommerce plugin for WordPress versions up to, and including, 1.19.20 Popup Builder plugin version 4.2.3 and older

Description: The issue allows authenticated attackers with contributor-level capabilities or above to upload arbitrary files on the affected site's server, which may make remote code execution possible. This is due to an improper capability setting on the display ticket themes page function.

Recommendations: For FooEvents for WooCommerce plugin for WordPress versions up to, and including, 1.19.20, update to version 1.19.21 to fully patch the issue. For Popup Builder plugin version 4.2.3 and older, remove or update the plugin to a version newer than 4.2.3. As a temporary workaround, consider disabling the display ticket themes page function until a patch is available.

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2024-6000

Affected Products

Fooevents For Woocommerce

Popup Builder

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-6000 · Security Note
• https://twitter.com/LuisIvanRita/status/1767475855020667036 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/1080810b-ec9a-44fb-b4da-49b28646a441?source=cve · Note
• https://help.fooevents.com/docs/topics/changelogs/fooevents-for-woocommerce · Note
• https://t.me/cvenotify/83390 · Telegram Post