CVE-2019-25738
CRITICALWordPress Hybrid Composer 1.4.6 Unauthenticated Settings Change
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25738. PoCs published by yasin.
AI-analyzed exploit summary This exploit leverages an unauthenticated option update vulnerability in WordPress Hybrid Composer <= 1.4.6 to enable user registration, set the default role to administrator, and create a new admin account. It demonstrates the vulnerability by sending crafted POST requests to the admin-ajax.php endpoint.
Description
WordPress Hybrid Composer 1.4.6 contains an unauthenticated settings change vulnerability that allows unauthenticated attackers to modify WordPress options by exploiting the hc_ajax_save_option action. Attackers can send POST requests to the admin-ajax.php endpoint with the action parameter set to hc_ajax_save_option to enable user registration and set the default role to administrator, enabling account takeover.
Exploits (1)
This exploit leverages an unauthenticated option update vulnerability in WordPress Hybrid Composer <= 1.4.6 to enable user registration, set the default role to administrator, and create a new admin account. It demonstrates the vulnerability by sending crafted POST requests to the admin-ajax.php endpoint.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H