The WP User Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Connect::complete() function in versions up to, and including, 2.9…
Medium CVSS 4.3
Summary
The WP User Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Connect::complete() function in versions up to, and including, 2.9.18. The function is registered on the admin_init hook (which fires for every authenticated user that reaches /wp-admin/, including Subscribers) and performs no current_user_can() or nonce verification before fetching Stripe credentials from the external WPUM connect service and writing them (publis…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://plugins.trac.wordpress.org/browser/wp-user-manager/tags/2.9.18/includes/integrations/stripe/Connect.php#L177
- https://plugins.trac.wordpress.org/browser/wp-user-manager/tags/2.9.18/includes/integrations/stripe/Connect.php#L203
- https://plugins.trac.wordpress.org/browser/wp-user-manager/tags/2.9.18/includes/integrations/stripe/Connect.php#L21
- https://plugins.trac.wordpress.org/changeset?reponame=&old=3701837%40wp-user-manager&new=3701837%40wp-user-manager
- https://www.wordfence.com/threat-intel/vulnerabilities/id/ecae11ec-c952-4f5a-9e55-e2ac2fa05100?source=cve
Timeline
- nvd_ingest NVD