Lucene search
PRIOn knowledge basePRION:CVE-2021-4362HistoryJun 07, 2023 - 2:15 a.m.
Authorization
2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
kiwi social share
plugin
vulnerability
authorization bypass
capability check
ajax action
unauthenticated attackers
arbitrary options
site takeover
nvd
The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_get_option() function called via the kiwi_social_share_get_option AJAX action in version 2.1.0. This makes it possible for unauthenticated attackers to read and modify arbitrary options on a WordPress site that can be used for complete site takeover. This was a previously fixed vulnerability that was reintroduced in this version.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kiwi_social_share | eq | 2.1.0 |
Related
nvd
nvd
CVE-2021-4362
2023-06-07 02:15:14
cvelist
cvelist
CVE-2021-4362
2023-06-07 01:51:28
cve
cve
CVE-2021-4362
2023-06-07 02:15:14