WCFM Membership Plugin up to 2.10.0 on WordPress wp_ajax_nopriv_wcfm_ajax_controller authorization

Summaryinfo

A vulnerability, which was classified as critical, has been found in WCFM Membership Plugin up to 2.10.0 on WordPress. This affects the function wp_ajax_nopriv_wcfm_ajax_controller. Performing a manipulation results in authorization. This vulnerability is identified as CVE-2022-4939. The attack can be initiated remotely. There is not any exploit available.

Detailsinfo

A vulnerability was found in WCFM Membership Plugin up to 2.10.0 on WordPress (WordPress Plugin). It has been classified as critical. This affects the function wp_ajax_nopriv_wcfm_ajax_controller. The manipulation with an unknown input leads to a authorization vulnerability. CWE is classifying the issue as CWE-862. The product does not perform an authorization check when an actor attempts to access a resource or perform an action. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings. This makes it possible for unauthenticated attackers to modify the membership registration form in a way that allows them to set the role for registration to that of any user including administrators. Once configured, the attacker can then register as an administrator.

The weakness was released 04/06/2023. It is possible to read the advisory at wordfence.com. This vulnerability is uniquely identified as CVE-2022-4939 since 04/05/2023. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 04/09/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• WordPress Plugin

Name

• WCFM Membership Plugin

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion