AMP for WP <= 0.9.97.19 - Missing Authorization

2018-10-20 00:00
Sybre Waaijer

Strategic Overview

Status
Patched in 0.9.97.20
Affected Version<= 0.9.97.19
CVSS6.3Medium
CVEN/A
View all AMP for WP – Accelerated Mobile Pages vulnerabilities

Vulnerability Overview

TheAMP for WP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ampforwp_save_steps_data AJAX hook in versions up to, and including, 0.9.97.19. This makes it possible for authenticated attackers to make otherwise privilege locked administrative changes to the vulnerable website and create admin accounts.

Technical Analysis

REMEDIATION: Update to version 0.9.97.20, or a newer patched version --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

External References

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C