CVE-2023-0958: Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handleinstallation function that is called via the inisevinstallation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as subscribers, to install select plugins from Inisev on vulnerable sites. CVE-2023-38514 appears to be a duplicate of this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-0958?
The severity of CVE-2023-0958 is medium with a severity value of 6.5.
Which plugins for WordPress by Inisev are affected by CVE-2023-0958?
The following plugins are affected by CVE-2023-0958: Backupbliss Backup Migration 1.2.8, Backupbliss Clone 2.3.8, Copy-delete-posts Duplicate Post 1.4.0, Inisev Redirection 1.1.4, Inisev Rss Redirect & Feedburner Alternative up to version 3.8, Inisev Ssl Mixed Content Fix up to version 3.2.4, Mypopups Pop-up 1.2.0, Socialshare Social Share Icons & Social Share Buttons up to version 3.5.8, Themecheck Enhanced Text Widget 1.5.8, Themecheck Ultimate Posts Widget 2.2.5, and Ultimatelysocial Social Media Share Buttons & Social Sharing Icons up to version 2.8.2.
What is the vulnerability of CVE-2023-0958?
CVE-2023-0958 is vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function in several plugins for WordPress by Inisev.
How can I fix CVE-2023-0958?
To fix CVE-2023-0958, it is recommended to update the affected plugins to the latest versions provided by the plugin authors.
Where can I find more information about CVE-2023-0958?
You can find more information about CVE-2023-0958 on the reference links provided: [1](https://plugins.trac.wordpress.org/browser/pop-up-pop-up/tags/1.1.9/modules/banner/misc.php#L427), [2](https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2823769%40http-https-remover%2Ftags%2F3.2.3&new=2944114%40http-https-remover%2Ftags%2F3.2.4), [3](https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2823770%40feedburner-alternative-and-rss-redirect%2Ftags%2F3.7&new=2944116%40feedburner-alternative-and-rss-redirect%2Ftags%2F3.8#file115)