What the vulnerability does
01Description
The Web Stories for WordPress plugin supports the WordPress built-in functionality of protecting content with a password. The content is then only accessible to website visitors after entering the password. In WordPress, users with the "Author" role can create stories, but don't have the ability to edit password protected stories. The vulnerability allowed users with said role to bypass this permission check when trying to duplicate the protected story in the plugin's own dashboard, giving them access to the seemingly protected content. We recommend upgrading to version 1.32 or beyond commit ad49781c2a35c5c92ef704d4b621ab4e5cb77d68 https://github.com/GoogleForCreators/web-stories-wp/commit/ad49781c2a35c5c92ef704d4b621ab4e5cb77d68
Explanation of Vulnerability in Simple Terms
02Summary
Web Stories for WordPress versions before 1.32 contain an authorization flaw that allows high-privilege users to access sensitive information they should not be able to view. The vulnerability does not require user interaction and affects confidentiality only. Site administrators should update to version 1.32 or later to close this access control gap.
What an attacker can do
03Attacker Capabilities
Read sensitive data that should be restricted from their user role.
Potential impact on your site
04Site Impact
Privileged users can view confidential information beyond their intended permissions.
Conditions required to exploit
05Prerequisites
Attacker must have high-privilege WordPress account (e.g., editor or administrator role).
Key dates
06Disclosure timeline
May 8, 2023
CVE published
January 28, 2025
Record updated
