// For flags

CVE-2024-2172

Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 - Unauthenticated Privilege Escalation

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

The Malware Scanner plugin and the Web Application Firewall plugin for WordPress (both by MiniOrange) are vulnerable to privilege escalation due to a missing capability check on the mo_wpns_init() function in all versions up to, and including, 4.7.2 (for Malware Scanner) and 2.1.1 (for Web Application Firewall). This makes it possible for unauthenticated attackers to escalate their privileges to that of an administrator.

El complemento Malware Scanner plugin and the Web Application Firewall para WordPress (ambos de MiniOrange) son vulnerables a la escalada de privilegios debido a una falta de verificación de capacidad en la función mo_wpns_init() en todas las versiones hasta la 4.7.2 incluida (para Malware Scanner). ) y 2.1.1 (para firewall de aplicaciones web). Esto hace posible que los atacantes no autenticados escale sus privilegios a los de administrador.

*Credits: Stiofan O'Connor
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2024-03-04 CVE Reserved
  • 2024-03-13 CVE Published
  • 2024-03-14 EPSS Updated
  • 2024-08-01 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-304: Missing Critical Step in Authentication
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cyberlord92
Search vendor "Cyberlord92"
 Web Application Firewall – Website Security
Search vendor "Cyberlord92" for product "Web Application Firewall – Website Security"
 <= 2.1.1
Search vendor "Cyberlord92" for product "Web Application Firewall – Website Security" and version " <= 2.1.1"
en
Affected
Cyberlord92
Search vendor "Cyberlord92"
 Malware Scanner
Search vendor "Cyberlord92" for product "Malware Scanner"
 <= 4.7.2
Search vendor "Cyberlord92" for product "Malware Scanner" and version " <= 4.7.2"
en
Affected