CVE-2024-4566: ShopLentor <= 2.8.8 - Missing Authorization to WordPress Option Modification
The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxdismiss function in all versions up to, and including, 2.8.8. This makes it possible for authenticated attackers, with contributor-level access and above, to set arbitrary WordPress options to "true". NOTE: This vulnerability can be exploited by attackers with subscriber- or customer-level access and above if (1) the WooCommerce plugin is deactivated or (2) access to the default WordPress admin dashboard is explicitly enabled for authenticated users.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ShopLentorto a version that resolves this vulnerability.Fixed in 2.8.8 - Configuration
Ensure ajax_dismiss enforces the proper WordPress capability checks so authenticated attackers (contributor-level and above) cannot use it to set arbitrary WordPress options.
ShopLentor (WordPress) ajax_dismiss capability check (missing authorization for WordPress option modification) = Add required capability check to prevent unauthorized WordPress option modification
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4566?
CVE-2024-4566 has a high severity rating due to the potential for unauthorized modification of data.
How do I fix CVE-2024-4566?
To fix CVE-2024-4566, update the ShopLentor plugin to version 2.8.9 or later, which includes the necessary capability checks.
Who is affected by CVE-2024-4566?
CVE-2024-4566 affects all versions of the ShopLentor plugin up to and including version 2.8.8 for WordPress.
What kind of access is required to exploit CVE-2024-4566?
An authenticated attacker with contributor-level access can exploit CVE-2024-4566 to modify data.
Is CVE-2024-4566 being actively exploited in the wild?
There are currently no known active exploits for CVE-2024-4566, but it remains a serious vulnerability.