Detections
Analytics

WordPress 4.7.x < 4.7.2 REST API 'id' Parameter Privilege Escalation

high Web App Scanning Plugin ID 98217

Language:

Synopsis

WordPress 4.7.x < 4.7.2 REST API 'id' Parameter Privilege Escalation

Description

The WordPress application running on the remote web server is version 4.7.x prior to 4.7.2. It is, therefore, affected by a privilege escalation vulnerability in the REST API due to a failure to properly sanitize user- supplied input to the 'id' parameter when editing or deleting blog posts. An unauthenticated, remote attacker can exploit this issue to run arbitrary PHP code, inject content into blog posts, modify blog post attributes, or delete blog posts.

The WordPress REST API is enabled by default as of version 4.7.0. This vulnerability was silently patched in WordPress version 4.7.2.

Note that WordPress is reportedly affected by additional vulnerabilities; however, the scanner has not tested for these.

Solution

Upgrade to WordPress version 4.7.2 or later.

See Also

http://www.nessus.org/u?49ca66d9

http://www.nessus.org/u?f1dc5ff8

Plugin Details

Severity: High

ID: 98217

Type: remote

Published: 5/23/2018

Updated: 9/7/2021

Scan Template: api, basic, full, pci, scan

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2017-1001000

CVSS v3

Risk Factor: High

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS Score Source: CVE-2017-1001000

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 3/28/2018

Vulnerability Publication Date: 3/29/2018

Reference Information

CVE: CVE-2017-1001000