Lucene search

wpvulndbChloe ChamberlandWPVDB-ID:9C1D386F-A55B-4042-8F1B-F37C508CDEB1
HistoryMay 13, 2020 - 12:00 a.m.

Site Kit by Google < 1.8.0 - Privilege Escalation to gain Search Console Access

Chloe Chamberland

This flaw allows any authenticated user, regardless of capability, to become a Google Search Console owner for any site running the Site Kit by Google plugin.


Steps to reproduce: 1. Log in as a subscriber on target WordPress site. 2. View the page source of /wp-admin and command+f to search for β€œproxySetupURL” 3. Copy the URL that should look something like:;=credentials_retrieval%20short_verification_token%20file_verification&nonce;=e12d949e42&site; 4. Open the previously copied URL in a new tab. 5. Sign in with any Google account and just follow the prompts - the site will be added to your search console at the end.