Vulnerability · Published Jul 11, 2024 · Assigned by Wordfence
CVE-2024-6624JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation
Critical 9.8
In plain English
A critical-severity privilege mismanagement in JSON API User from parorrey. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
The JSON API User plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.9.3. This is due to improper controls on custom user meta fields. This makes it possible for unauthenticated attackers to register as administrators on the site. The plugin requires the JSON API plugin to also be installed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| parorrey | JSON API User | 0 – through 3.9.3 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/a4a26f60-5912-4d4a-8ef8-e4357c1fb1ff?source=cve
- https://plugins.trac.wordpress.org/browser/json-api-user/trunk/controllers/User.php#L51
- https://plugins.trac.wordpress.org/browser/json-api-user/trunk/controllers/User.php#L187
- https://plugins.trac.wordpress.org/changeset/3115185/