CVE-2022-4939

CVSS V2 None CVSS V3 None

Description

THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings. This makes it possible for unauthenticated attackers to modify the membership registration form in a way that allows them to set the role for registration to that of any user including administrators. Once configured, the attacker can then register as an administrator.

Overview

CVE ID
CVE-2022-4939

Assigner
security@wordfence.com

Vulnerability Status
Analyzed

Published Version
2023-04-05T19:15:07

Last Modified Date
2023-04-12T01:41:16

Weakness Enumerations

CWE	URL
CWE-862	http://cwe.mitre.org/data/definitions/862.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:wclovers:wcfm_membership::::::wordpress::*	1	OR		2.10.1

References

Reference URL	Reference Tags
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2633191%40wc-multivendor-membership&new=2633191%40wc-multivendor-membership&sfp_email=&sfph_mail=	Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/0870de2d-bca5-4d57-a07f-877a416ce0d5?source=cve	Patch Third Party Advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-4939
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4939

History

Created	Old Value	New Value	Data Type	Notes
2023-04-17 04:12:45				Added to TrackCVE
2023-04-17 04:12:47			Weakness Enumeration	new