The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the wpematico_import_…
High CVSS 8.8
Summary
The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the wpematico_import_settings function in all versions up to, and including, 2.8.24. This makes it possible for authenticated attackers, with subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/etruel/wpematico/commit/e297f41b49c6ec76635b006dff8a964a99a1ed24
- https://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.23/app/tools_page.php#L224
- https://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.23/app/wpematico_functions.php#L2077
- https://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.23/app/wpematico_functions.php#L2096
- https://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.23/wpematico_class.php#L59
- https://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.24/app/tools_page.php#L224
- https://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.24/app/wpematico_functions.php#L2077
- https://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.24/app/wpematico_functions.php#L2096
- https://plugins.trac.wordpress.org/browser/wpematico/tags/2.8.24/wpematico_class.php#L59
- https://www.wordfence.com/threat-intel/vulnerabilities/id/4e591cb4-058d-4d8e-948e-d65ab01db618?source=cve
Timeline
- nvd_ingest NVD