PT-2025-6617 · WordPress · Option Editor
Colin Xu
·
Published
2025-02-18
·
Updated
2025-03-03
·
CVE-2024-13852
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Option Editor plugin for WordPress version 1.0
Description
The issue is due to missing nonce validation on the
plugin page() function, making it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request. This can be leveraged to update the default role for registration to administrator and enable user registration, allowing attackers to gain administrative user access to a vulnerable site.Recommendations
For version 1.0, consider disabling the
plugin page() function until a patch is available to prevent exploitation. Additionally, restrict access to the plugin's settings to minimize the risk of unauthorized changes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.LPE
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Option Editor