CVE-2023-3977: Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handleinstallation function that is called via the inisevinstallation AJAX aciton in various versions. This makes it possible for unauthenticated attackers to install plugins from the limited list via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-3977.
What is the severity of CVE-2023-3977?
The severity of CVE-2023-3977 is medium with a CVSS score of 4.3.
Which software is affected by CVE-2023-3977?
Several plugins for WordPress by Inisev are affected by CVE-2023-3977, including Inisev Redirection, Themecheck Ultimate Posts Widget, Inisev Ssl Mixed Content Fix, Ultimatelysocial Social Media Share Buttons & Social Sharing Icons, Inisev Rss Redirect & Feedburner Alternative, Mypopups Pop-up, Themecheck Enhanced Text Widget, Copy-delete-posts Duplicate Post, Backupbliss Clone, and Backupbliss Backup Migration.
How does the vulnerability CVE-2023-3977 work?
CVE-2023-3977 allows for a Cross-Site Request Forgery attack that enables unauthorized installation of plugins by exploiting a missing nonce check on the handle_installation function called via the inisev_installation AJAX action.
Are there any references related to CVE-2023-3977?
Yes, you can find references related to CVE-2023-3977 at the following URLs: [Reference 1](https://plugins.trac.wordpress.org/browser/pop-up-pop-up/tags/1.1.9/modules/banner/misc.php#L427), [Reference 2](https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2823769%40http-https-remover%2Ftags%2F3.2.3&new=2944114%40http-https-remover%2Ftags%2F3.2.4), [Reference 3](https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2823770%40feedburner-alternative-and-rss-redirect%2Ftags%2F3.7&new=2944116%40feedburner-alternative-and-rss-redirect%2Ftags%2F3.8#file115).