Vulnerability · Published Nov 1, 2021 · Assigned by Wordfence

CVE-2021-39341OptinMonster <= 2.6.4 Unprotected REST-API Endpoints

High 8.2

In plain English

A high-severity security flaw in OptinMonster from OptinMonster. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 21.9% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)21.9%top 2.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Nuclei

Official description

The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the logged_in_or_has_api_key function in the ~/OMAPI/RestApi.php file that can used to exploit inject malicious web scripts on sites with the plugin installed. This affects versions up to, and including, 2.6.4.

Affected products (as reported)

Vendor	Product	Versions
OptinMonster	OptinMonster	2.6.4 – through 2.6.4

Weakness: CWE-285, CWE-319 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

References

https://www.wordfence.com/blog/2021/10/1000000-sites-affected-by-optinmonster-vulnerabilities/ x_refsource_MISC
https://wordfence.com/vulnerability-advisories/#CVE-2021-39341 x_refsource_MISC
https://plugins.trac.wordpress.org/browser/optinmonster/trunk/OMAPI/RestApi.php?rev=2606519#L1460 x_refsource_MISC