Description

WordPress Plugin Login or Logout Menu Item is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change plugin options. WordPress Plugin Login or Logout Menu Item version 1.1.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.2.0 or latest

References

https://blog.nintechnet.com/unauthenticated-options-change-in-wordpress-login-or-logout-menu-item-plugin/

https://labs.sucuri.net/lack-of-controls-when-using-wordpress-update_option-with-user-input-data-equals-plugin-nightmare/

https://plugins.svn.wordpress.org/login-or-logout-menu-item/trunk/readme.txt

Related Vulnerabilities

OpenSSL Possible denial of service attack Vulnerability (CVE-2020-1971)

Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5284)

WordPress Plugin Backup Scheduler Cross-Site Request Forgery (1.5.13)

Oracle JRE CVE-2012-3342 Vulnerability (CVE-2012-3342)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2010-3933)

Severity

High

Classification

CVE-2019-15820 CWE-264 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass