AMP for WP <= 0.9.97.19 - Missing Authorization
2018-10-20 00:00
Sybre WaaijerStrategic Overview
StatusPatched in 0.9.97.20
Affected PluginAMP for WP – Accelerated Mobile Pages
Affected Version
<= 0.9.97.19CVSS6.3Medium
CVE
N/AVulnerability Overview
TheAMP for WP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ampforwp_save_steps_data AJAX hook in versions up to, and including, 0.9.97.19. This makes it possible for authenticated attackers to make otherwise privilege locked administrative changes to the vulnerable website and create admin accounts.
Technical Analysis
REMEDIATION: Update to version 0.9.97.20, or a newer patched version --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C