The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make additional changes to the site, as the plugin does not use capability checks for this purpose.
References
| Link | Resource |
|---|---|
| https://www.wordfence.com/threat-intel/vulnerabilities/id/84b616fa-ff64-49e8-8c4a-7d7bfdf758be | Third Party Advisory |
| https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2811758%40jeg-elementor-kit%2Ftrunk&old=2810568%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail= | Exploit Third Party Advisory |
| https://wordpress.org/plugins/jeg-elementor-kit/#developers | Product Release Notes Third Party Advisory |
Configurations
History
07 Nov 2023, 03:51
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| Summary | The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make additional changes to the site, as the plugin does not use capability checks for this purpose. |
Information
Published : 2022-12-22 21:15
Updated : 2023-11-07 03:51
NVD link : CVE-2022-3794
Mitre link : CVE-2022-3794
JSON object : View
Products Affected
jegtheme
- jeg_elementor_kit
CWE
No CWE.