The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the ajax_save_fields() function in all versions up to, and including, 16.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to add custom fields that can be updated and then use the check_and_overwrite_wp_or_woocommerce_fields function to update the wp_capabilities field to have administrator privileges.
References
| Link | Resource |
|---|---|
| https://www.wordfence.com/threat-intel/vulnerabilities/id/a18fa7e6-813d-4b48-bd4e-5232fb8382d1?source=cve | Third Party Advisory |
| https://codecanyon.net/item/user-extra-fields/12949844 | Product |
Configurations
History
19 Nov 2024, 17:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/a18fa7e6-813d-4b48-bd4e-5232fb8382d1?source=cve - Third Party Advisory | |
| References | () https://codecanyon.net/item/user-extra-fields/12949844 - Product | |
| CPE | cpe:2.3:a:vanquish:user_extra_fields:*:*:*:*:*:wordpress:*:* | |
| First Time |
Vanquish
Vanquish user Extra Fields |
13 Nov 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-13 05:15
Updated : 2024-11-19 17:08
NVD link : CVE-2024-10800
Mitre link : CVE-2024-10800
JSON object : View
Products Affected
vanquish
- user_extra_fields
CWE
CWE-862
Missing Authorization