Vulnerability · Published Jan 24, 2022 · Assigned by WPScan
CVE-2021-24968Ultimate FAQ < 2.1.2 - Subscriber+ Arbitrary FAQ Creation
Medium 5.7
In plain English
A medium-severity missing authorization in Ultimate FAQ – WordPress FAQ and Accordion Plugin from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS NVD)5.7Medium
Exploit odds (30 days)0.4%top 62.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Ultimate FAQ WordPress plugin before 2.1.2 does not have capability and CSRF checks in the ewd_ufaq_welcome_add_faq and ewd_ufaq_welcome_add_faq_page AJAX actions, available to any authenticated users. As a result, any users, with a role as low as Subscriber could create FAQ and FAQ questions
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Ultimate FAQ – WordPress FAQ and Accordion Plugin | 2.1.2 – before 2.1.2 |
Weakness: CWE-862
References
- https://wpscan.com/vulnerability/f0a9e6cc-46cc-4ac2-927a-c006b8e8aa68 x_refsource_MISC
- https://plugins.trac.wordpress.org/changeset/2648562 x_refsource_CONFIRM