description: Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.
problem types: CWE-862 Missing Authorization
affected:
{
vendor: steve85b
product: SSL Mixed Content Fix
versions:
version: *, status: affected, lessThanOrEqual: 3.2.3, versionType: semver
defaultStatus: unaffected
}
{
vendor: copydeleteposts
product: Duplicate Post
versions:
version: *, status: affected, lessThanOrEqual: 1.3.9, versionType: semver
defaultStatus: unaffected
}
{
vendor: socialsharepro
product: Social Share Icons & Social Share Buttons
versions:
version: *, status: affected, lessThanOrEqual: 3.5.7, versionType: semver
defaultStatus: unaffected
}
{
vendor: cl272
product: Ultimate Posts Widget
versions:
version: *, status: affected, lessThanOrEqual: 2.2.4, versionType: semver
defaultStatus: unaffected
}
{
vendor: migrate
product: Backup Migration
versions:
version: *, status: affected, lessThanOrEqual: 1.2.7, versionType: semver
defaultStatus: unaffected
}
{
vendor: popups
product: Pop-up
versions:
version: *, status: affected, lessThanOrEqual: 1.1.9, versionType: semver
defaultStatus: unaffected
}
{
vendor: socialdude
product: Redirection
versions:
version: *, status: affected, lessThanOrEqual: 1.1.3, versionType: semver
defaultStatus: unaffected
}
{
vendor: migrate
product: Clone
versions:
version: *, status: affected, lessThanOrEqual: 2.3.7, versionType: semver
defaultStatus: unaffected
}
{
vendor: socialdude
product: Social Media Share Buttons & Social Sharing Icons
versions:
version: *, status: affected, lessThanOrEqual: 2.8.1, versionType: semver
defaultStatus: unaffected
}
{
vendor: s-feeds
product: RSS Redirect & Feedburner Alternative
versions:
version: *, status: affected, lessThanOrEqual: 3.7, versionType: semver
defaultStatus: unaffected
}
{
vendor: cl272
product: Enhanced Text Widget
versions:
version: *, status: affected, lessThanOrEqual: 1.5.7, versionType: semver
defaultStatus: unaffected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
baseScore: 4.3
baseSeverity: MEDIUM
]