Description

WordPress Plugin Login or Logout Menu Item is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change plugin options. WordPress Plugin Login or Logout Menu Item version 1.1.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.2.0 or latest

References

https://blog.nintechnet.com/unauthenticated-options-change-in-wordpress-login-or-logout-menu-item-plugin/

https://labs.sucuri.net/lack-of-controls-when-using-wordpress-update_option-with-user-input-data-equals-plugin-nightmare/

https://plugins.svn.wordpress.org/login-or-logout-menu-item/trunk/readme.txt

Related Vulnerabilities

WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.3)

WordPress Plugin Simple File List Arbitrary File Upload (4.2.2)

Drupal Core 8.7.x Cross-Site Scripting (8.7.0 - 8.7.11)

WordPress Plugin WordPress Landing Pages Multiple Unspecified Vulnerabilities (1.7.8)

WordPress Plugin Popups, Optin Forms, Email Newsletters for MailChimp, AWeber, HubSpot-MailOptin Cross-Site Request Forgery (1.2.19.1)

Severity

High

Classification

CVE-2019-15820 CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Authentication Bypass