What the vulnerability does
01Description
The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905. This is due to insufficient validation and capability check on the 'rover_idx_refresh_social_callback' function. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in to administrator. The vulnerability is partially patched in version 3.0.0.2905 and fully patched in version 3.0.0.2906.
Explanation of Vulnerability in Simple Terms
02Summary
Rover IDX versions up to 3.0.0.2905 contain an authentication bypass vulnerability. An attacker with low-level user access can read, modify, or delete sensitive data and disrupt service availability. The vulnerability requires network access and valid credentials but no additional user interaction. Organizations should update to a version newer than 3.0.0.2905 immediately.
What an attacker can do
03Attacker Capabilities
Read, modify, or delete sensitive data; disrupt service availability.
Potential impact on your site
04Site Impact
Unauthorized data access, modification, or deletion; potential service downtime.
Conditions required to exploit
05Prerequisites
Valid low-level user account; network access to the application.
Key dates
06Disclosure timeline
October 22, 2024
CVE published
April 8, 2026
Record updated
