CVE-2023-6036

Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass

CVSS 9.8 CRITICALEPSS 1.8%

Vexday Risk Score

48Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 9.8EPSS 1.8%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

31 Jan 2024Public PoC

12 Feb 2024Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

The Web3 WordPress plugin before 3.0.0 is vulnerable to an authentication bypass due to incorrect authentication checking in the login flow in functions 'handle_auth_request' and 'hadle_login_request'. This makes it possible for non authenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Unknown · Web3

public PoCs found — 2

githubgithub.com/pctripsesp/CVE-2023-6036★ 1 cve_referencewpscan.com/vulnerability/7f30ab20-805b-422c-a9a5-21d39c570ee4/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://wpscan.com/vulnerability/7f30ab20-805b-422c-a9a5-21d39c570ee4/