Paper/Archive/CVE-2021-4362

CVE-2021-4362

wpkube Social Sharing Plugin – Kiwi — The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_sha…

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 72.8.728 × 2014.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() function called via the kiwi_social_share_get_option AJAX action in version 2.1.0. This makes it possible for unauthenticated attackers to read and modify arbitrary options on a WordPress site that can be used for complete site takeover. This was a previously fixed vulnerability that was reintroduced in this version.

Affected

ProductAffectedFixed inSource

Social Sharing Plugin – Kiwi2.1.0 – 2.1.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/8148b6d0-190a-4b97-8af7-edd6943116d1?source=cve refblog.nintechnet.com/wordpress-kiwi-social-sharing-plugin-fixed-critical-vulnerability refwordpress.org/plugins/kiwi-social-share/#developers