CVE-2021-24717

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions.

CVSS v3 8.8 HIGH
CVSS v2.0 6.5 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://wpscan.com/vulnerability/5916ea42-eb33-463d-8528-2a142805c91f	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:automatorwp:automatorwp:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2021-11-01 09:15

Updated : 2024-02-28 18:48

NVD link : CVE-2021-24717

Mitre link : CVE-2021-24717

CVE.ORG link : CVE-2021-24717

JSON object : View

Products Affected

automatorwp

automatorwp

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2021-24717", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2021-11-01T09:15:08.900", "references": [{"url": "https://wpscan.com/vulnerability/5916ea42-eb33-463d-8528-2a142805c91f", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-863"}]}, {"type": "Secondary", "source": "contact@wpscan.com", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions."}, {"lang": "es", "value": "El plugin AutomatorWP de WordPress versiones anteriores a 1.7.6, no realiza comprobaciones de capacidad, que permite a usuarios con roles de suscriptor enumerar automatizaciones, revelar el t\u00edtulo de las publicaciones privadas o los correos electr\u00f3nicos de los usuarios, llamar a funciones o llevar a cabo una escalada de privilegios por medio de acciones Ajax"}], "lastModified": "2021-11-30T20:22:48.463", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:automatorwp:automatorwp:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "AF491AA0-0236-44CF-978B-65C865BACDE8", "versionEndExcluding": "1.7.6"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}