CVE-2023-4730

Description

The LadiApp plugn for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init_endpoint() function hooked via 'init' in versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to modify a variety of settings. An attacker can directly modify the 'ladipage_key' which enables them to create new posts on the website and inject malicious web scripts.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Affected products

binhnguyenplus / LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…0 – 4.3

References

MISChttps://www.wordfence.com/threat-intel/vulnerabilities/id/6c4baf2e-7f5e-4954-88f9-76d32f297aab?source=cve
MISChttps://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L153
MISChttps://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L175
MISChttps://plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php#L187