Vulnerability · Published Jul 27, 2024 · Assigned by Wordfence
CVE-2024-6591Ultimate WordPress Auction Plugin <= 4.2.7 - Missing Authorization to Unauthenticated Email Creation
Medium 5.8
In plain English
A medium-severity missing authorization in Ultimate WordPress Auction Plugin from nitesh_singh. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Official description
The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized email creation and sending due to a missing capability check on the 'send_auction_email_callback' and 'resend_auction_email_callback' functions in all versions up to, and including, 4.2.7. This makes it possible for unauthenticated attackers to craft emails that include links and send to any email address.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| nitesh_singh | Ultimate WordPress Auction Plugin | 0 – through 4.2.7 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/534a5d1d-cc34-4d84-b3a3-bf2282718656?source=cve
- https://plugins.trac.wordpress.org/changeset/3132812/ultimate-auction/trunk/ultimate-auction.php
- https://plugins.trac.wordpress.org/browser/ultimate-auction/trunk/ultimate-auction.php#L93 x_transferred
- https://plugins.trac.wordpress.org/browser/ultimate-auction/trunk/ultimate-auction.php#L119 x_transferred