XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update
63Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck e tem prova de conceito pública.
ssvc Actcvss 8.8epss 1.5%
da publicação à arma0 dias
Publicada no NVD6 de jun.
1ª PoC6 de jun.
VulnCheck5 de jun.
probabilidade de exploração
1.5%top 28% das CVEs
exploração observada
simVulnCheck
1 exploit(s) público(s)
Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary options on affected sites. This can be used to enable new user registration and set the default role for new users to Administrator.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
xootix · Login & Register Customizer – Popup | Slider | Inline | WooCommercexootix · OTP Login & Register Woocommercexootix · Side Cart Woocommerce | Woocommerce Cartxootix · Waitlist Woocommerce ( Back in stock notifier )PoCs públicas encontradas — 1
vulncheckvulncheck.com/xdb/1f1fa3466b65não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://plugins.trac.wordpress.org/browser/easy-login-woocommerce/trunk/includes/xoo-framework/admin/class-xoo-admin-settings.php#L83https://plugins.trac.wordpress.org/browser/side-cart-woocommerce/trunk/includes/xoo-framework/admin/class-xoo-admin-settings.php#L83https://plugins.trac.wordpress.org/changeset/3093994/https://plugins.trac.wordpress.org/changeset/3111541/https://plugins.trac.wordpress.org/changeset/3115392/mobile-login-woocommerce/trunk?contextall=1&old=3084918&old_path=%2Fmobile-login-woocommerce%2Ftrunkhttps://plugins.trac.wordpress.org/changeset/3117332/https://www.wordfence.com/threat-intel/vulnerabilities/id/005a27c6-b9eb-466c-b0c3-ce52c25bb321?source=cve