Lucene search

WordfenceCVE-2024-8791

HistorySep 24, 2024 - 3:15 a.m.

CVE-2024-8791

2024-09-2403:15:03

CWE-639

Wordfence

web.nvd.nist.gov

donation forms

charitable

wordpress

privilege escalation

vulnerability

plugin

user identity

update_core_user

unauthenticated attackers

email address

password

arbitrary user accounts

administrators

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

28.1%

JSON

The Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.8.1.14. This is due to the plugin not properly verifying a user’s identity when the ID parameter is supplied through the update_core_user() function. This makes it possible for unauthenticated attackers to update the email address and password of arbitrary user accounts, including administrators, which can then be used to log in to those user accounts.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

wpcharitablecharitableRange<1.8.1.15wordpress

VendorProductVersionCPE
wpcharitablecharitable*cpe:2.3:a:wpcharitable:charitable:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wpcharitable	charitable	*	cpe:2.3:a:wpcharitable:charitable::::::wordpress::*

CNA Affected

[
  {
    "vendor": "smub",
    "product": "Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.8.1.14",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

plugins.trac.wordpress.org/browser/charitable/tags/1.8.1.14/includes/users/class-charitable-user.php#L872

plugins.trac.wordpress.org/changeset/3154009/charitable/trunk/includes/users/class-charitable-user.php

www.wordfence.com/threat-intel/vulnerabilities/id/0ee60943-b583-4a99-8e62-846b380c98aa?source=cve

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.001

Percentile

28.1%

JSON

Related for CVE-2024-8791