Description

WordPress Plugin Login or Logout Menu Item is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change plugin options. WordPress Plugin Login or Logout Menu Item version 1.1.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.2.0 or latest

References

https://blog.nintechnet.com/unauthenticated-options-change-in-wordpress-login-or-logout-menu-item-plugin/

https://labs.sucuri.net/lack-of-controls-when-using-wordpress-update_option-with-user-input-data-equals-plugin-nightmare/

https://plugins.svn.wordpress.org/login-or-logout-menu-item/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Relevanssi-A Better Search 'Seach Query' Field HTML Injection (2.7.2)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.3)

MySQL CVE-2023-22113 Vulnerability (CVE-2023-22113)

WordPress Plugin Redirection Cross-Site Request Forgery (1.1.4)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26082)

Severity

High

Classification

CVE-2019-15820 CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass