Lucene search

WPScanCVE-2021-24752

HistoryOct 18, 2021 - 2:15 p.m.

CVE-2021-24752

2021-10-1814:15:10

CWE-352

CWE-284

WPScan

web.nvd.nist.gov

cve-2021-24752

catchthemes

wordpress

security vulnerability

csrf

capability check

nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

21.2%

JSON

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before 1.5, Generate Child Theme WordPress plugin before 1.6, Essential Content Types WordPress plugin before 1.9, Catch Web Tools WordPress plugin before 2.7, Catch Under Construction WordPress plugin before 1.4, Catch Themes Demo Import WordPress plugin before 1.6, Catch Sticky Menu WordPress plugin before 1.7, Catch Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite Scroll WordPress plugin before 1.9, Catch Import Export WordPress plugin before 1.9, Catch Gallery WordPress plugin before 1.7, Catch Duplicate Switcher WordPress plugin before 1.6, Catch Breadcrumb WordPress plugin before 1.7, Catch IDs WordPress plugin before 2.4’s configurations.

Affected configurations

Nvd

Vulners

Node

catchpluginscatch_scroll_progress_barRange<1.6wordpress

catchpluginscatch_sticky_menuRange<1.7wordpress

catchpluginscatch_themes_demo_importRange<1.6wordpress

catchpluginscatch_under_constructionRange<1.4wordpress

catchpluginscatch_web_toolsRange<2.7wordpress

catchpluginsessential_content_typesRange<1.9wordpress

catchpluginsessential_widgetsRange<1.9wordpress

catchpluginsgenerate_child_themeRange<1.6wordpress

catchpluginsheader_enhancementRange<1.5wordpress

catchpluginsto_topRange<2.3wordpress

VendorProductVersionCPE
catchpluginscatch_scroll_progress_bar*cpe:2.3:a:catchplugins:catch_scroll_progress_bar:*:*:*:*:*:wordpress:*:*
catchpluginscatch_sticky_menu*cpe:2.3:a:catchplugins:catch_sticky_menu:*:*:*:*:*:wordpress:*:*
catchpluginscatch_themes_demo_import*cpe:2.3:a:catchplugins:catch_themes_demo_import:*:*:*:*:*:wordpress:*:*
catchpluginscatch_under_construction*cpe:2.3:a:catchplugins:catch_under_construction:*:*:*:*:*:wordpress:*:*
catchpluginscatch_web_tools*cpe:2.3:a:catchplugins:catch_web_tools:*:*:*:*:*:wordpress:*:*
catchpluginsessential_content_types*cpe:2.3:a:catchplugins:essential_content_types:*:*:*:*:*:wordpress:*:*
catchpluginsessential_widgets*cpe:2.3:a:catchplugins:essential_widgets:*:*:*:*:*:wordpress:*:*
catchpluginsgenerate_child_theme*cpe:2.3:a:catchplugins:generate_child_theme:*:*:*:*:*:wordpress:*:*
catchpluginsheader_enhancement*cpe:2.3:a:catchplugins:header_enhancement:*:*:*:*:*:wordpress:*:*
catchpluginsto_top*cpe:2.3:a:catchplugins:to_top:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
catchplugins	catch_scroll_progress_bar	*	cpe:2.3:a:catchplugins:catch_scroll_progress_bar::::::wordpress::*
catchplugins	catch_sticky_menu	*	cpe:2.3:a:catchplugins:catch_sticky_menu::::::wordpress::*
catchplugins	catch_themes_demo_import	*	cpe:2.3:a:catchplugins:catch_themes_demo_import::::::wordpress::*
catchplugins	catch_under_construction	*	cpe:2.3:a:catchplugins:catch_under_construction::::::wordpress::*
catchplugins	catch_web_tools	*	cpe:2.3:a:catchplugins:catch_web_tools::::::wordpress::*
catchplugins	essential_content_types	*	cpe:2.3:a:catchplugins:essential_content_types::::::wordpress::*
catchplugins	essential_widgets	*	cpe:2.3:a:catchplugins:essential_widgets::::::wordpress::*
catchplugins	generate_child_theme	*	cpe:2.3:a:catchplugins:generate_child_theme::::::wordpress::*
catchplugins	header_enhancement	*	cpe:2.3:a:catchplugins:header_enhancement::::::wordpress::*
catchplugins	to_top	*	cpe:2.3:a:catchplugins:to_top::::::wordpress::*

CNA Affected

[
  {
    "product": "Essential Widgets",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.9",
        "status": "affected",
        "version": "1.9",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "To Top",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "2.3",
        "status": "affected",
        "version": "2.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Header Enhancement",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.5",
        "status": "affected",
        "version": "1.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Generate Child Theme",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.6",
        "status": "affected",
        "version": "1.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Essential Content Types",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.9",
        "status": "affected",
        "version": "1.9",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Web Tools",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "2.7",
        "status": "affected",
        "version": "2.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Under Construction",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.4",
        "status": "affected",
        "version": "1.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Themes Demo Import",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.6",
        "status": "affected",
        "version": "1.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Sticky Menu",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.7",
        "status": "affected",
        "version": "1.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Scroll Progress Bar",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.6",
        "status": "affected",
        "version": "1.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Social Gallery and Widget",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "2.3",
        "status": "affected",
        "version": "2.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Infinite Scroll",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.9",
        "status": "affected",
        "version": "1.9",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Import Export",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.9",
        "status": "affected",
        "version": "1.9",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Gallery",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.7",
        "status": "affected",
        "version": "1.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Duplicate Switcher",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.6",
        "status": "affected",
        "version": "1.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch Breadcrumb",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "1.7",
        "status": "affected",
        "version": "1.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Catch IDs",
    "vendor": "CatchThemes",
    "versions": [
      {
        "lessThan": "2.4",
        "status": "affected",
        "version": "2.4",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/181a729e-fffe-457c-9e8d-a4343fd2e630

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

21.2%

JSON

Related for CVE-2021-24752