Paper/Archive/CVE-2021-4341

CVE-2021-4341

stylemix Directory Listings WordPress plugin – uListing — uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 66.3.663 × 2013.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The uListing plugin for WordPress is vulnerable to authorization bypass via Ajax due to missing capability checks, missing input validation, and a missing security nonce in the stm_update_email_data AJAX action in versions up to, and including, 1.6.6. This makes it possible for unauthenticated attackers to change any WordPress option in the database.

Affected

ProductAffectedFixed inSource

Directory Listings WordPress plugin – uListing< 1.71.7CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/1814537d-8307-4d1f-86c8-801519172be5?source=cve refblog.nintechnet.com/wordpress-ulisting-plugin-fixed-multiple-critical-vulnerabilities