CRUDLab WP Like Button Plugin up to 1.6.0 on WordPress wp_like_button.php contains each_page_url/code_snippet improper authentication

Summaryinfo

A vulnerability has been found in CRUDLab WP Like Button Plugin up to 1.6.0 on WordPress and classified as critical. Affected by this issue is the function contains of the file wp_like_button.php. This manipulation of the argument each_page_url/code_snippet as part of Parameter causes improper authentication. This vulnerability appears as CVE-2019-13344. The attack may be initiated remotely. In addition, an exploit is available.

Detailsinfo

A vulnerability classified as critical was found in CRUDLab WP Like Button Plugin up to 1.6.0 on WordPress (WordPress Plugin). Affected by this vulnerability is the function contains of the file wp_like_button.php. The manipulation of the argument each_page_url/code_snippet as part of a Parameter leads to a improper authentication vulnerability. The CWE definition for the vulnerability is CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to change settings. The contains() function in wp_like_button.php did not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update settings, as demonstrated by the wp-admin/admin.php?page=facebook-like-button each_page_url or code_snippet parameter.

The weakness was presented 07/05/2019. This vulnerability is known as CVE-2019-13344 since 07/05/2019. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details and also a public exploit are known.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept. By approaching the search of inurl:wp_like_button.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Exploit-DB (47078). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• WordPress Plugin

Vendor

• CRUDLab

Name

• WP Like Button Plugin

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion