// For flags

CVE-2024-4566

ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification

Severity Score

7.1
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track
*SSVC
Descriptions

The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 2.8.8. This makes it possible for authenticated attackers, with contributor-level access and above, to set arbitrary WordPress options to "true". NOTE: This vulnerability can be exploited by attackers with subscriber- or customer-level access and above if (1) the WooCommerce plugin is deactivated or (2) access to the default WordPress admin dashboard is explicitly enabled for authenticated users.

El complemento ShopLentor para WordPress es vulnerable a modificaciones no autorizadas de datos debido a una falta de verificación de capacidad en la función ajax_dismiss en todas las versiones hasta la 2.8.8 incluida. Esto hace posible que atacantes autenticados, con acceso de nivel de colaborador y superior, establezcan opciones arbitrarias de WordPress en "true". NOTA: Esta vulnerabilidad puede ser aprovechada por atacantes con acceso a nivel de suscriptor o cliente y superior si (1) el complemento WooCommerce está desactivado o (2) el acceso al panel de administración predeterminado de WordPress está explícitamente habilitado para usuarios autenticados.

*Credits: ali maher
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
None
Integrity
Partial
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Track
Exploitation
None
Automatable
No
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2024-05-06 CVE Reserved
  • 2024-05-20 CVE Published
  • 2024-08-01 CVE Updated
  • 2024-12-17 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-862: Missing Authorization
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Devitemsllc
Search vendor "Devitemsllc"
 ShopLentor – WooCommerce Builder For Elementor & Gutenberg +12 Modules – All In One Solution (formerly WooLentor)
Search vendor "Devitemsllc" for product "ShopLentor – WooCommerce Builder For Elementor & Gutenberg +12 Modules – All In One Solution (formerly WooLentor)"
 <= 2.8.8
Search vendor "Devitemsllc" for product "ShopLentor – WooCommerce Builder For Elementor & Gutenberg +12 Modules – All In One Solution (formerly WooLentor)" and version " <= 2.8.8"
en
Affected