Unauthorized modification of data in LadiApp plugin for WordPress due to missing capability check
CVE-2023-4728

5.4MEDIUM

Key Information:

Vendor
Wordpress
Status
Ladiapp: Landing Page, Popupx, Marketing Automation, Affiliate Marketing…
Vendor
CVE Published:
12 March 2024

Summary

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() function hooked via an AJAX action in versions up to, and including, 4.4. This makes it possible for authenticated attackers with subscriber-level access and above to change the LadiPage key (a key fully controlled by the attacker), enabling them to freely create new pages, including web pages that trigger stored XSS

Affected Version(s)

LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing… * <= 4.4

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/ladipage/trunk...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

GiongfNef
.