Kriesi Enfold Plugin up to 6.0.9 on WordPress Setting avia-export-class.php access control

Summaryinfo

A vulnerability labeled as critical has been found in Kriesi Enfold Plugin up to 6.0.9 on WordPress. This issue affects some unknown processing of the file avia-export-class.php of the component Setting Handler. Executing a manipulation can lead to access control. This vulnerability is registered as CVE-2024-13693. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability classified as critical was found in Kriesi Enfold Plugin up to 6.0.9 on WordPress. This vulnerability affects an unknown part of the file avia-export-class.php of the component Setting Handler. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. As an impact it is known to affect confidentiality. CVE summarizes:

The Enfold theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check in avia-export-class.php in all versions up to, and including, 6.0.9. This makes it possible for unauthenticated attackers to export all avia settings which may included sensitive information such as the Mailchimp API Key, reCAPTCHA Secret Key, or Envato private token if they are set.

The weakness was published by Michael Mazzolini. The advisory is shared for download at wordfence.com. This vulnerability was named CVE-2024-13693 since 01/23/2025. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 02/28/2025). The MITRE ATT&CK project declares the attack technique as T1068.

By approaching the search of inurl:avia-export-class.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• WordPress Plugin

Vendor

• Kriesi

Name

• Enfold Plugin

Version

• 6.0.0
• 6.0.1
• 6.0.2
• 6.0.3
• 6.0.4
• 6.0.5
• 6.0.6
• 6.0.7
• 6.0.8
• 6.0.9

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion