CVE-2024-4611 Information

Description

The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the ‘decrypt_value’ and on the ‘doCookieAuth’ functions in all versions up to and including 4.3.2. This makes it possible for unauthenticated attackers to log in as any existing user on the site such as an administrator if they previously used the login via the plugin API. This can only be exploited if the ‘openssl’ php extension is not loaded on the server.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Reference

https://www.wordfence.com/threat-intel/vulnerabilities/id/d1498fdf-9d5e-4277-92be-469d6646864b?source=cve https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_User.php?rev=2789173#L40 https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_Theme_Switcher.php?rev=2456516#L167 https://plugins.trac.wordpress.org/browser/apppresser/trunk/inc/AppPresser_Theme_Switcher.php?rev=2456516#L133 https://plugins.trac.wordpress.org/changeset/3093975/apppresser

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.1