BuddyPress 5.0.0-7.2.0 - Unauthenticated Privilege Escalation via REST API Members Endpoint
Title source: llmExploitation Summary
CVE-2021-21389 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including HoangKien1020, mynameSumin. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2021-21389, demonstrating a privilege escalation vulnerability in BuddyPress (versions 5.0.0 to 7.2.0) via REST API manipulation, leading to RCE. The exploit registers a user, escalates privileges to administrator, and uploads a malicious plugin for command execution.
Description
BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue.
Exploits (2)
This repository contains a functional exploit for CVE-2021-21389, demonstrating a privilege escalation vulnerability in BuddyPress (versions 5.0.0 to 7.2.0) via REST API manipulation, leading to RCE. The exploit registers a user, escalates privileges to administrator, and uploads a malicious plugin for command execution.
This repository contains a functional exploit for CVE-2021-21389, which targets a privilege escalation vulnerability in BuddyPress. The exploit registers a user, escalates privileges to administrator, and achieves RCE by uploading a malicious plugin.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N