The Udimi Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_disconnect()` function in all versions up to, and including, 3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin's six configuration options — including the API key, connected Udimi user email, and tracking-script payload — effectively disconnecting the site from the configured Udimi account. The companion `ajax_connect()` handler is missing the same checks, allowing the same low-privilege attackers to overwrite those options with an attacker-supplied API key.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
References 7
https://plugins.trac.wordpress.org/browser/udimi-optin/tags/3.2/class.php#L47
security@wordfence.com
https://plugins.trac.wordpress.org/browser/udimi-optin/tags/3.2/class.php#L82
security@wordfence.com
https://plugins.trac.wordpress.org/browser/udimi-optin/tags/3.2/udimi-optin.php…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/udimi-optin/tags/3.2/udimi-optin.php…
security@wordfence.com
https://plugins.trac.wordpress.org/browser/udimi-optin/trunk/class.php#L82
security@wordfence.com
https://plugins.trac.wordpress.org/changeset?reponame=&new=3525585%40udimi-opti…
security@wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/263f7a72-8887-42c3-a1…
security@wordfence.com