Authorization Bypass in uListing Plugin for WordPress
CVE-2021-4341
9.8CRITICAL
Key Information:
- Vendor
- Wordpress
- Vendor
- CVE Published:
- 7 June 2023
Summary
The uListing plugin for WordPress has a vulnerability that allows for an authorization bypass via AJAX. This is caused by inadequate capability checks, lack of input validation, and absence of a security nonce in the stm_update_email_data AJAX action. As a result, unauthenticated attackers can alter any WordPress option stored in the database, posing a significant security threat to WordPress installations using this plugin.
Affected Version(s)
Directory Listings WordPress plugin – uListing * < 1.7
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Jerome Bruandet