CVE-2023-4140: WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation
The WP Ultimate CSV Importer plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.9.8 due to insufficient restriction on the 'getheadervalues' function. This makes it possible for authenticated attackers, with minimal permissions such as an author, if the administrator previously grants access in the plugin settings, to modify their user role by supplying the 'wpcapabilities->cus1' parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-4140?
CVE-2023-4140 is a vulnerability in the WP Ultimate CSV Importer plugin for WordPress that allows authenticated attackers with minimal permissions to escalate their privileges.
What is the severity of CVE-2023-4140?
The severity of CVE-2023-4140 is high with a CVSS score of 8.8.
How does CVE-2023-4140 impact WordPress?
CVE-2023-4140 allows authenticated attackers in WordPress to escalate their privileges, potentially gaining unauthorized access to sensitive information or performing malicious actions.
Which version of the WP Ultimate CSV Importer plugin is affected by CVE-2023-4140?
Versions up to and including 7.9.8 of the WP Ultimate CSV Importer plugin for WordPress are affected by CVE-2023-4140.
How can I fix CVE-2023-4140?
To fix CVE-2023-4140, update the WP Ultimate CSV Importer plugin to a version that is not vulnerable, such as version 7.9.9 or later.