description: The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). This is due to 'companion_disable_popup' function only checking the nonce while sending user input to the 'update_option' function. This makes it possible for authenticated attackers to change otherwise restricted options.
problem types: CWE-862 Missing Authorization
affected:
{
vendor: extendthemes
product: Mesmerize
versions:
version: *, status: affected, lessThanOrEqual: 1.6.89, versionType: semver
defaultStatus: unaffected
}
{
vendor: extendthemes
product: Materialis
versions:
version: *, status: affected, lessThanOrEqual: 1.0.172, versionType: semver
defaultStatus: unaffected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
baseScore: 8.8
baseSeverity: HIGH
]