CVE-2019-16251

YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change

Severity Score

4.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

plugin-fw/lib/yit-plugin-panel-wc.php in the YIT Plugin Framework through 3.3.8 for WordPress allows authenticated options changes.

el archivo plugin-fw/lib/yit-plugin-panel-wc.php en YIT Plugin Framework versiones hasta 3.3.8 para WordPress, permite cambios de opciones autenticados.

Various versions of a various YITH WooCommerce plugins that use the YIT Plugin Framework through 3.3.8 are vulnerable to authorization bypass due to a missing capability check in the the 'save_toggle_element_options' function in .plugin-fw/lib/yit-plugin-panel-wc.php. This allows authenticated users with subscriber-level permissions or above to change arbitrary plugin settings.

*Credits: Jerome Bruandet

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-09-11 CVE Reserved
2019-10-31 CVE Published
2023-03-08 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-862: Missing Authorization

CAPEC

References (2)

URL	Tag	Source
https://blog.nintechnet.com/authenticated-settings-change-vulnerability-in-yit-plugin-framework	Third Party Advisory
https://wpvulndb.com/vulnerabilities/9932	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Yithemes Search vendor "Yithemes"		Yith Woocommerce Wishlist Search vendor "Yithemes" for product "Yith Woocommerce Wishlist"				<= 2.2.13 Search vendor "Yithemes" for product "Yith Woocommerce Wishlist" and version " <= 2.2.13"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Compare Search vendor "Yithemes" for product "Yith Woocommerce Compare"				<= 2.3.13 Search vendor "Yithemes" for product "Yith Woocommerce Compare" and version " <= 2.3.13"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Quick View Search vendor "Yithemes" for product "Yith Woocommerce Quick View"				<= 1.3.13 Search vendor "Yithemes" for product "Yith Woocommerce Quick View" and version " <= 1.3.13"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Zoom Magnifier Search vendor "Yithemes" for product "Yith Woocommerce Zoom Magnifier"				<= 1.3.11 Search vendor "Yithemes" for product "Yith Woocommerce Zoom Magnifier" and version " <= 1.3.11"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Ajax Search Search vendor "Yithemes" for product "Yith Woocommerce Ajax Search"				<= 1.6.9 Search vendor "Yithemes" for product "Yith Woocommerce Ajax Search" and version " <= 1.6.9"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Badge Management Search vendor "Yithemes" for product "Yith Woocommerce Badge Management"				<= 1.3.19 Search vendor "Yithemes" for product "Yith Woocommerce Badge Management" and version " <= 1.3.19"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Brands Add-on Search vendor "Yithemes" for product "Yith Woocommerce Brands Add-on"				<= 1.3.6 Search vendor "Yithemes" for product "Yith Woocommerce Brands Add-on" and version " <= 1.3.6"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Request A Quote Search vendor "Yithemes" for product "Yith Woocommerce Request A Quote"				<= 1.4.7 Search vendor "Yithemes" for product "Yith Woocommerce Request A Quote" and version " <= 1.4.7"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Social Login Search vendor "Yithemes" for product "Yith Woocommerce Social Login"				<= 1.3.4 Search vendor "Yithemes" for product "Yith Woocommerce Social Login" and version " <= 1.3.4"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Order Tracking Search vendor "Yithemes" for product "Yith Woocommerce Order Tracking"				<= 1.2.10 Search vendor "Yithemes" for product "Yith Woocommerce Order Tracking" and version " <= 1.2.10"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Pdf Invoice And Shipping List Search vendor "Yithemes" for product "Yith Woocommerce Pdf Invoice And Shipping List"				<= 1.2.12 Search vendor "Yithemes" for product "Yith Woocommerce Pdf Invoice And Shipping List" and version " <= 1.2.12"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Pre-order For Woocommerce Search vendor "Yithemes" for product "Yith Pre-order For Woocommerce"				<= 1.1.9 Search vendor "Yithemes" for product "Yith Pre-order For Woocommerce" and version " <= 1.1.9"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Advanced Reviews Search vendor "Yithemes" for product "Yith Woocommerce Advanced Reviews"				<= 1.3.9 Search vendor "Yithemes" for product "Yith Woocommerce Advanced Reviews" and version " <= 1.3.9"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Product Add-ons Search vendor "Yithemes" for product "Yith Woocommerce Product Add-ons"				<= 1.5.21 Search vendor "Yithemes" for product "Yith Woocommerce Product Add-ons" and version " <= 1.5.21"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Gift Cards Search vendor "Yithemes" for product "Yith Woocommerce Gift Cards"				<= 1.3.7 Search vendor "Yithemes" for product "Yith Woocommerce Gift Cards" and version " <= 1.3.7"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Subscription Search vendor "Yithemes" for product "Yith Woocommerce Subscription"				<= 1.3.4 Search vendor "Yithemes" for product "Yith Woocommerce Subscription" and version " <= 1.3.4"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Affiliates Search vendor "Yithemes" for product "Yith Woocommerce Affiliates"				<= 1.6.3 Search vendor "Yithemes" for product "Yith Woocommerce Affiliates" and version " <= 1.6.3"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Cart Messages Search vendor "Yithemes" for product "Yith Woocommerce Cart Messages"				<= 1.4.3 Search vendor "Yithemes" for product "Yith Woocommerce Cart Messages" and version " <= 1.4.3"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Product Bundles Search vendor "Yithemes" for product "Yith Woocommerce Product Bundles"				<= 1.1.15 Search vendor "Yithemes" for product "Yith Woocommerce Product Bundles" and version " <= 1.1.15"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Frequently Bought Together Search vendor "Yithemes" for product "Yith Woocommerce Frequently Bought Together"				<= 1.2.10 Search vendor "Yithemes" for product "Yith Woocommerce Frequently Bought Together" and version " <= 1.2.10"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Multi-step Checkout Search vendor "Yithemes" for product "Yith Woocommerce Multi-step Checkout"				<= 1.7.4 Search vendor "Yithemes" for product "Yith Woocommerce Multi-step Checkout" and version " <= 1.7.4"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Color And Label Variations For Woocommerce Search vendor "Yithemes" for product "Yith Color And Label Variations For Woocommerce"				<= 1.8.11 Search vendor "Yithemes" for product "Yith Color And Label Variations For Woocommerce" and version " <= 1.8.11"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Custom Thank You Page For Woocommerce Search vendor "Yithemes" for product "Yith Custom Thank You Page For Woocommerce"				<= 1.1.6 Search vendor "Yithemes" for product "Yith Custom Thank You Page For Woocommerce" and version " <= 1.1.6"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Product Size Charts For Woocommerce Search vendor "Yithemes" for product "Yith Product Size Charts For Woocommerce"				<= 1.1.1 Search vendor "Yithemes" for product "Yith Product Size Charts For Woocommerce" and version " <= 1.1.1"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Added To Cart Popup Search vendor "Yithemes" for product "Yith Woocommerce Added To Cart Popup"				<= 1.3.11 Search vendor "Yithemes" for product "Yith Woocommerce Added To Cart Popup" and version " <= 1.3.11"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Bulk Product Editing Search vendor "Yithemes" for product "Yith Woocommerce Bulk Product Editing"				<= 1.2.13 Search vendor "Yithemes" for product "Yith Woocommerce Bulk Product Editing" and version " <= 1.2.13"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Stripe Search vendor "Yithemes" for product "Yith Woocommerce Stripe"				<= 2.0.1 Search vendor "Yithemes" for product "Yith Woocommerce Stripe" and version " <= 2.0.1"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Waiting List Search vendor "Yithemes" for product "Yith Woocommerce Waiting List"				<= 1.3.9 Search vendor "Yithemes" for product "Yith Woocommerce Waiting List" and version " <= 1.3.9"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Points And Rewards Search vendor "Yithemes" for product "Yith Woocommerce Points And Rewards"				<= 1.3.4 Search vendor "Yithemes" for product "Yith Woocommerce Points And Rewards" and version " <= 1.3.4"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Advanced Refund System For Woocommerce Search vendor "Yithemes" for product "Yith Advanced Refund System For Woocommerce"				<= 1.0.10 Search vendor "Yithemes" for product "Yith Advanced Refund System For Woocommerce" and version " <= 1.0.10"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Authorize.net Payment Gateway Search vendor "Yithemes" for product "Yith Woocommerce Authorize.net Payment Gateway"				<= 1.1.12 Search vendor "Yithemes" for product "Yith Woocommerce Authorize.net Payment Gateway" and version " <= 1.1.12"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Best Sellers Search vendor "Yithemes" for product "Yith Woocommerce Best Sellers"				<= 1.1.11 Search vendor "Yithemes" for product "Yith Woocommerce Best Sellers" and version " <= 1.1.11"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Mailchimp Search vendor "Yithemes" for product "Yith Woocommerce Mailchimp"				<= 2.1.3 Search vendor "Yithemes" for product "Yith Woocommerce Mailchimp" and version " <= 2.1.3"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Multi Vendor Search vendor "Yithemes" for product "Yith Woocommerce Multi Vendor"				<= 3.4.0 Search vendor "Yithemes" for product "Yith Woocommerce Multi Vendor" and version " <= 3.4.0"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Questions And Answers Search vendor "Yithemes" for product "Yith Woocommerce Questions And Answers"				<= 1.1.9 Search vendor "Yithemes" for product "Yith Woocommerce Questions And Answers" and version " <= 1.1.9"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Woocommerce Recover Abandoned Cart Search vendor "Yithemes" for product "Yith Woocommerce Recover Abandoned Cart"				<= 1.3.2 Search vendor "Yithemes" for product "Yith Woocommerce Recover Abandoned Cart" and version " <= 1.3.2"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Paypal Express Checkout For Woocommerce Search vendor "Yithemes" for product "Yith Paypal Express Checkout For Woocommerce"				<= 1.2.5 Search vendor "Yithemes" for product "Yith Paypal Express Checkout For Woocommerce" and version " <= 1.2.5"		wordpress		Affected
Yithemes Search vendor "Yithemes"		Yith Desktop Notifications For Woocommerce Search vendor "Yithemes" for product "Yith Desktop Notifications For Woocommerce"				<= 1.2.7 Search vendor "Yithemes" for product "Yith Desktop Notifications For Woocommerce" and version " <= 1.2.7"		wordpress		Affected