data-tables-generator-by-supsystic Plugin up to 1.9.91 on WordPress Capability Check default permission

Summaryinfo

A vulnerability has been found in data-tables-generator-by-supsystic Plugin up to 1.9.91 on WordPress and classified as critical. This affects an unknown part of the component Capability Check. This manipulation causes privilege escalation. This vulnerability is registered as CVE-2020-12075. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability has been found in data-tables-generator-by-supsystic Plugin up to 1.9.91 on WordPress (WordPress Plugin) and classified as critical. Affected by this vulnerability is an unknown part of the component Capability Check. The manipulation with an unknown input leads to a privilege escalation vulnerability. The CWE definition for the vulnerability is CWE-276. During installation, installed file permissions are set to allow anyone to modify those files. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.

The weakness was published 04/23/2020. This vulnerability is known as CVE-2020-12075 since 04/23/2020. The attack can be launched remotely. A single authentication is necessary for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1222 according to MITRE ATT&CK.

Upgrading to version 1.9.92 eliminates this vulnerability.

Similar entry is available at VDB-154256. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• WordPress Plugin

Name

• data-tables-generator-by-supsystic Plugin

Version

• 1.9.0
• 1.9.1
• 1.9.2
• 1.9.3
• 1.9.4
• 1.9.5
• 1.9.6
• 1.9.7
• 1.9.8
• 1.9.9
• 1.9.10
• 1.9.11
• 1.9.12
• 1.9.13
• 1.9.14
• 1.9.15
• 1.9.16
• 1.9.17
• 1.9.18
• 1.9.19
• 1.9.20
• 1.9.21
• 1.9.22
• 1.9.23
• 1.9.24
• 1.9.25
• 1.9.26
• 1.9.27
• 1.9.28
• 1.9.29
• 1.9.30
• 1.9.31
• 1.9.32
• 1.9.33
• 1.9.34
• 1.9.35
• 1.9.36
• 1.9.37
• 1.9.38
• 1.9.39
• 1.9.40
• 1.9.41
• 1.9.42
• 1.9.43
• 1.9.44
• 1.9.45
• 1.9.46
• 1.9.47
• 1.9.48
• 1.9.49
• 1.9.50
• 1.9.51
• 1.9.52
• 1.9.53
• 1.9.54
• 1.9.55
• 1.9.56
• 1.9.57
• 1.9.58
• 1.9.59
• 1.9.60
• 1.9.61
• 1.9.62
• 1.9.63
• 1.9.64
• 1.9.65
• 1.9.66
• 1.9.67
• 1.9.68
• 1.9.69
• 1.9.70
• 1.9.71
• 1.9.72
• 1.9.73
• 1.9.74
• 1.9.75
• 1.9.76
• 1.9.77
• 1.9.78
• 1.9.79
• 1.9.80
• 1.9.81
• 1.9.82
• 1.9.83
• 1.9.84
• 1.9.85
• 1.9.86
• 1.9.87
• 1.9.88
• 1.9.89
• 1.9.90
• 1.9.91

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion