A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress (WordPress Plugin). Affected by this issue is an unknown code of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirect_url with an unknown input leads to a redirect vulnerability. Using CWE to declare the problem leads to CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. Impacted is integrity.

The weakness was released 04/22/2015 as 63124c021ae24b68e56872530df26eb4268ad633. The advisory is shared for download at github.com. This vulnerability is handled as CVE-2015-10104. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1204.001.

By approaching the search of inurl:classes/class-icons-for-features-admin.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 1.0.1 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch 63124c021ae24b68e56872530df26eb4268ad633 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version. The advisory contains the following remark:

Security Fix for _query_arg vulnerability.

Entries connected to this vulnerability are available at VDB-60621, VDB-62042, VDB-66657 and VDB-73375.

Productinfo

Type

• WordPress Plugin

Name

• Icons for Features Plugin

Version

• 1.0.0

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion