CVE-2022-0952 Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update

2022-05-0216:05:46

WPScan

www.cve.org

cve-2022-0952

wordpress plugin

unauthenticated attackers

rest endpoint

arbitrary options_update

AI Score

8.9

Confidence

High

EPSS

0.48

Percentile

97.5%

JSON

The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated attackers could change arbitrary blog options, such as the users_can_register and default_role, allowing them to create a new admin account and take over the blog.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Sitemap by click5",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.0.36"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]