Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 11
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Backupbliss Backup_Migration
cpe:2.3:a:backupbliss:backup_migration:*:*:*:*:*:wordpress:*:*
|
— |
1.2.8
|
|
Backupbliss Clone
cpe:2.3:a:backupbliss:clone:*:*:*:*:*:wordpress:*:*
|
— |
2.3.8
|
|
Copy-Delete-Posts Duplicate_Post
cpe:2.3:a:copy-delete-posts:duplicate_post:*:*:*:*:*:wordpress:*:*
|
— |
1.4.0
|
|
Inisev Enhanced_Text_Widget
cpe:2.3:a:inisev:enhanced_text_widget:*:*:*:*:*:wordpress:*:*
|
— |
1.5.8
|
|
Inisev Redirection
cpe:2.3:a:inisev:redirection:*:*:*:*:*:wordpress:*:*
|
— |
1.1.4
|
|
Inisev Rss_Redirect_\&_Feedburner_Alternative
cpe:2.3:a:inisev:rss_redirect_\&_feedburner_alternative:*:*:*:*:*:wordpress:*:*
|
— |
3.8
|
|
Inisev Ssl_Mixed_Content_Fix
cpe:2.3:a:inisev:ssl_mixed_content_fix:*:*:*:*:*:wordpress:*:*
|
— |
3.2.4
|
|
Inisev Ultimate_Posts_Widget
cpe:2.3:a:inisev:ultimate_posts_widget:*:*:*:*:*:wordpress:*:*
|
— |
2.2.5
|
|
Mypopups Pop-Up
cpe:2.3:a:mypopups:pop-up:*:*:*:*:*:wordpress:*:*
|
— |
1.2.0
|
|
Socialshare Social_Share_Icons_\&_Social_Share_Buttons
cpe:2.3:a:socialshare:social_share_icons_\&_social_share_buttons:*:*:*:*:*:wordpress:*:*
|
— |
3.5.8
|
|
Ultimatelysocial Social_Media_Share_Buttons_\&_Social_Sharing_Icons
cpe:2.3:a:ultimatelysocial:social_media_share_buttons_\&_social_sharing_icons:*:*:*:*:*:wordpress:*:*
|
— |
2.8.2
|
References 23
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.2.7/includes/ba…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/backup-backup/tags/1.2.8/includes/ba…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/copy-delete-posts/tags/1.3.8/banner/…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/copy-delete-posts/tags/1.4.0/banner/…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/enhanced-text-widget/tags/1.5.6/bann…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/enhanced-text-widget/tags/1.5.7/bann…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/feedburner-alternative-and-rss-redir…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/http-https-remover/tags/3.2.3/banner…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/pop-up-pop-up/tags/1.1.9/modules/ban…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/pop-up-pop-up/tags/1.2.0/modules/ban…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/redirect-redirection/tags/1.1.3/incl…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/ultimate-posts-widget/tags/2.2.4/ban…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/ultimate-posts-widget/tags/2.2.5/ban…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/ultimate-social-media-icons/tags/2.8…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/ultimate-social-media-icons/tags/2.8…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/ultimate-social-media-plus/tags/3.5.…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/wp-clone-by-wp-academy/tags/2.3.7/mo…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/wp-clone-by-wp-academy/tags/2.3.8/mo…
security@wordfence.com
https://plugins.trac.wordpress.org/changeset/2944041/ultimate-social-media-plus…
security@wordfence.com
https://plugins.trac.wordpress.org/changeset?old_path=%2Fcopy-delete-posts%2Fta…
security@wordfence.com
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&ol…
security@wordfence.com
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&ol…
security@wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/cf7bdd0e-f3b3-4be5-8a…
security@wordfence.com