CVE-2021-25032
Critical
Description
The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabilities Pro WordPress plugin before 2.3.1 does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure that the options to be updated belong to the plugin. As a result, unauthenticated attackers could update arbitrary blog options, such as the default role and make any new registered user with an administrator role.
SeverityCritical
CVSS9.8
Exploit probability—
ProductPublishpress Capabilities
PublishedJan 10, 2022
First seenJan 10, 2022
How to fix
Update
- publishpress capabilities2.3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| publishpress capabilities | v < 2.3.1 | 2.3.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.