CVE-2024-4605

2024-05-1415:44:11

[email protected]

web.nvd.nist.gov

remote code execution

metadata storage

lower privileged users

arbitrary code

wordpress plugin

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

JSON

The Breakdance plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.7.1 via post meta data. This is due to the plugin storing custom data in metadata without an underscore prefix. This makes it possible for lower privileged users, such as contributors, to edit this data via UI. As a result they can escalate their privileges or execute arbitrary code.

Affected configurations

Vulners

Node

breakdanceelegant_custom_fontsRange≤1.7.1

VendorProductVersionCPE
breakdanceelegant_custom_fonts*cpe:2.3:a:breakdance:elegant_custom_fonts:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
breakdance	elegant_custom_fonts	*	cpe:2.3:a:breakdance:elegant_custom_fonts::::::::

CNA Affected

[
  {
    "vendor": "Breakdance",
    "product": "Breakdance",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.7.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]