Vulnerability · Published Apr 17, 2023 · Assigned by WPScan

CVE-2023-0889TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Update

Medium 6.5

In plain English

A medium-severity security flaw in Themeflection Numbers from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.3%top 77.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin. As a result, it could allow any authenticated users, such as subscriber, to update arbitrary blog options, such as enabling registration and set the default role to administrator

Affected products (as reported)

Vendor	Product	Versions
Unknown	Themeflection Numbers	0 – before 2.0.1

References

https://wpscan.com/vulnerability/c39473a7-47fc-4bce-99ad-28d03f41e74e exploit, vdb-entry, technical-description