kodaichodai

7 exploits Active since Jan 2024
CVE-2024-0324 NOMISEC HIGH WORKING POC
User Profile Builder < 3.10.8 - Unauthenticated Two-Factor Authentication Settings Modification
The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wppb_two_factor_authentication_settings_update' function in all versions up to, and including, 3.10.8. This makes it possible for unauthenticated attackers to enable or disable the 2FA functionality present in the Premium version of the plugin for arbitrary user roles.
CVSS 8.2
CVE-2024-0379 NOMISEC MEDIUM WORKING POC
Custom Twitter Feeds < 2.2.1 - Cross-Site Request Forgery via ctf_auto_save_tokens Function
The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the ctf_auto_save_tokens function. This makes it possible for unauthenticated attackers to update the site's twitter API token and secret via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS 4.3
CVE-2024-0509 NOMISEC MEDIUM WORKING POC
WP 404 Auto Redirect to Similar Post < 1.0.3 - Unauthenticated Reflected Cross-Site Scripting via Request Parameter
The WP 404 Auto Redirect to Similar Post plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘request’ parameter in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS 6.1
CVE-2024-0588 NOMISEC MEDIUM WORKING POC
Paid Memberships Pro <2.12.10 - CSRF
The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.10. This is due to missing nonce validation on the pmpro_lifter_save_streamline_option() function. This makes it possible for unauthenticated attackers to enable the streamline setting with Lifter LMS via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVE-2024-32793 and CVE-2024-32794 appear to be a duplicate of this issue.
CVSS 4.3
CVE-2024-0590 NOMISEC MEDIUM WORKING POC
Microsoft Clarity plugin <0.9.3 - CSRF
The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonce validation on the edit_clarity_project_id() function. This makes it possible for unauthenticated attackers to change the project id and add malicious JavaScript via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS 6.1
CVE-2024-0623 NOMISEC MEDIUM WORKING POC
VK Block Patterns <= 1.31.1.1 - Cross-Site Request Forgery via vbp_clear_patterns_cache()
The VK Block Patterns plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.31.1.1. This is due to missing or incorrect nonce validation on the vbp_clear_patterns_cache() function. This makes it possible for unauthenticated attackers to clear the patterns cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS 4.3
CVE-2024-0624 NOMISEC MEDIUM WORKING POC
Paid Memberships Pro - WordPress <2.12.7 - CSRF
The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.12.7. This is due to missing or incorrect nonce validation on the pmpro_update_level_order() function. This makes it possible for unauthenticated attackers to update the order of levels via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS 5.3