The Social Warfare plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several AJAX actions in versions up to, and including, 4.3.0. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete post meta information and reset network access tokens.
References
Link | Resource |
---|---|
https://plugins.trac.wordpress.org/browser/social-warfare/trunk/lib/options/SWP_Options_Page.php?rev=2364155#L923 | Exploit Third Party Advisory |
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2844092%40social-warfare&new=2844092%40social-warfare&sfp_email=&sfph_mail= | Patch Third Party Advisory |
https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc4ba2c-32eb-46c5-bb40-7c0150fc1ca4 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Wordfence
Published: 2023-01-19T14:07:08.694Z
Updated:
Reserved: 2023-01-19T14:06:58.319Z
Link: CVE-2023-0402
JSON object: View
NVD Information
Status : Modified
Published: 2023-01-19T15:15:13.813
Modified: 2023-11-07T04:00:24.353
Link: CVE-2023-0402
JSON object: View
Redhat Information
No data.
CWE
No CWE.