CVE-2023-1597 tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation

2023-07-1012:40:40

WPScan

www.cve.org

cve-2023-1597

unauthenticated access

arbitrary user metadata

privilege escalation

authorization bypass

cross-site request forgery

wordpress plugin

AI Score

Confidence

High

EPSS

0.003

Percentile

68.9%

JSON

The tagDiv Cloud Library WordPress plugin before 2.7 does not have authorisation and CSRF in an AJAX action accessible to both unauthenticated and authenticated users, allowing unauthenticated users to change arbitrary user metadata, which could lead to privilege escalation by setting themselves as an admin of the blog.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "tagDiv Cloud Library",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "2.7"
      }
    ],
    "defaultStatus": "unaffected"
  }
]