CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11. This is due to a missing capability check on the 'wpext_handle_snippet_update' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code on the server providing an admin has created at least one code snippet.
Explanation of Vulnerability in Simple Terms
The Ultimate WordPress Toolkit plugin for WordPress contains a missing authorization check that allows authenticated users with low privileges to perform actions they should not have access to. An attacker with a basic WordPress account can read sensitive data, modify site content, or disrupt site availability. All versions up to 3.0.11 are affected. Site administrators should update immediately when a patch becomes available.
What an attacker can do
Read sensitive data, modify content, or disrupt site availability with a low-privilege WordPress account.
Potential impact on your site
Any registered user can escalate their access to perform unauthorized actions affecting data, content, and site stability.
Conditions required to exploit
Attacker needs a valid WordPress user account with low privileges; no user interaction required.
Key dates
External resources
Related vulnerabilities
