CVE-2023-4140
First published: Fri Aug 04 2023(Updated: )
The WP Ultimate CSV Importer plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.9.8 due to insufficient restriction on the 'get_header_values' function. This makes it possible for authenticated attackers, with minimal permissions such as an author, if the administrator previously grants access in the plugin settings, to modify their user role by supplying the 'wp_capabilities->cus1' parameter.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Smackcoders Wp Ultimate Csv Importer | <=7.9.8 | |
| <=7.9.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://plugins.trac.wordpress.org/changeset/2944635/wp-ultimate-csv-importer/trunk/wp-ultimate-csv-importer.php
- https://www.wordfence.com/threat-intel/vulnerabilities/id/5fdba41f-daa5-44e8-bc47-aa8b7bd31054?source=cve
- https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.9.6/importExtensions/ImportHelpers.php#L205
Frequently Asked Questions
What is CVE-2023-4140?
CVE-2023-4140 is a vulnerability in the WP Ultimate CSV Importer plugin for WordPress that allows authenticated attackers with minimal permissions to escalate their privileges.
What is the severity of CVE-2023-4140?
The severity of CVE-2023-4140 is high with a CVSS score of 8.8.
How does CVE-2023-4140 impact WordPress?
CVE-2023-4140 allows authenticated attackers in WordPress to escalate their privileges, potentially gaining unauthorized access to sensitive information or performing malicious actions.
Which version of the WP Ultimate CSV Importer plugin is affected by CVE-2023-4140?
Versions up to and including 7.9.8 of the WP Ultimate CSV Importer plugin for WordPress are affected by CVE-2023-4140.
How can I fix CVE-2023-4140?
To fix CVE-2023-4140, update the WP Ultimate CSV Importer plugin to a version that is not vulnerable, such as version 7.9.9 or later.
- collector/nvd-latest
- collector/nvd-index
- agent/author
- agent/type
- collector/epss-latest
- source/FIRST
- agent/remedy
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/event
- agent/tags
- agent/source
- vendor/smackcoders
- canonical/smackcoders wp ultimate csv importer
- version/smackcoders wp ultimate csv importer/7.9.8