CVE-2021-4374
CRITICAL EXPLOITED NUCLEIWordPress Automatic <3.53.2 - Info Disclosure
Title source: llmExploitation Summary
CVE-2021-4374 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 1 public exploit from researchers including h00die, Jerome Bruandet, including a Metasploit module auxiliary/admin/http/wp_automatic_plugin_privesc.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated arbitrary WordPress options change vulnerability in the Automatic plugin (CVE-2021-4374) to enable user registration, set default user role to administrator, and create a new admin user.
Description
The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the process_form.php file. This makes it possible for unauthenticated attackers to arbitrarily update the settings of a vulnerable site and ultimately compromise the entire site.
Exploits (1)
This Metasploit module exploits an unauthenticated arbitrary WordPress options change vulnerability in the Automatic plugin (CVE-2021-4374) to enable user registration, set default user role to administrator, and create a new admin user.
Nuclei Templates (1)
http.html:"wp-content/plugins/wp-automatic/"
wp-content/plugins/wp-automatic/
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H