Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.
CVSS 3.x
| Source | Score | Severity | Vector | Exploitability | Impact |
|---|---|---|---|---|---|
| security@wordfence.com | 4.3 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | 2.8 | 1.4 |
Products Affected
| Vendor | Product | Version |
|---|---|---|
| backupbliss | clone | * |
| ultimatelysocial | social_media_share_buttons_&_social_sharing_icons | * |
| mypopups | pop-up | * |
| backupbliss | backup_migration | * |
| inisev | ssl_mixed_content_fix | * |
| inisev | redirection | * |
| socialshare | social_share_icons_&_social_share_buttons | * |
| themecheck | enhanced_text_widget | * |
| themecheck | ultimate_posts_widget | * |
| inisev | rss_redirect_&_feedburner_alternative | * |
| copy-delete-posts | duplicate_post | * |