Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| nvd@nist.gov | 8.8 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | 2.8 | 5.9 |
| audit@patchstack.com | 5.4 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L | 2.8 | 2.5 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| mypopups | pop-up | * |
Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| security@wordfence.com | 4.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | 2.8 | 1.4 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| inisev | redirection | * |
| inisev | rss_redirect_&_feedburner_alternative | * |
| copy-delete-posts | duplicate_post | * |
| themecheck | ultimate_posts_widget | * |
| ultimatelysocial | social_media_share_buttons_&_social_sharing_icons | * |
| mypopups | pop-up | * |
| backupbliss | clone | * |
| inisev | ssl_mixed_content_fix | * |
| backupbliss | backup_migration | * |
| socialshare | social_share_icons_&_social_share_buttons | * |
| themecheck | enhanced_text_widget | * |
Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for unauthenticated attackers to install plugins from the limited list via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| security@wordfence.com | 4.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N | 2.8 | 1.4 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| inisev | redirection | * |
| inisev | rss_redirect_&_feedburner_alternative | * |
| copy-delete-posts | duplicate_post | * |
| themecheck | ultimate_posts_widget | * |
| ultimatelysocial | social_media_share_buttons_&_social_sharing_icons | * |
| mypopups | pop-up | * |
| backupbliss | clone | * |
| inisev | ssl_mixed_content_fix | * |
| backupbliss | backup_migration | * |
| themecheck | enhanced_text_widget | * |