Van Ons WP GDPR Compliance <1.4.3 - RCE
Title source: llmExploitation Summary
CVE-2018-19207 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 3 public exploits from researchers including aeroot, cved-sources, Mikey Veenstra (WordFence), Thomas Labadie, including a Metasploit module auxiliary/admin/http/wp_gdpr_compliance_privesc.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Python script exploits CVE-2018-19207 in the WP GDPR Compliance plugin (versions <=1.4.2) by enabling user registration, setting the default role to administrator, and creating an admin user via unauthenticated AJAX requests.
Description
The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018.
Exploits (3)
This Python script exploits CVE-2018-19207 in the WP GDPR Compliance plugin (versions <=1.4.2) by enabling user registration, setting the default role to administrator, and creating an admin user via unauthenticated AJAX requests.
This repository provides a Docker-based environment for CVE-2018-19207, a vulnerability in the WP GDPR Compliance plugin. The script sets up a vulnerable WordPress instance with the plugin activated, allowing for testing of the exploit.
This Metasploit module exploits a privilege escalation vulnerability in the WordPress WP GDPR Compliance plugin (CVE-2018-19207) by allowing unauthenticated users to modify WordPress settings via admin-ajax.php due to missing capability checks. It enables user registration, sets the default role to administrator, and registers a new admin user.
Nuclei Templates (1)
References (4)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H