All in One SEO <= 2.2.4.1 - Privilege Escalation to Arbitrary Post Modification

2014-05-31 00:00
Marc-Alexandre Montpas

Strategic Overview

Status
Patched in 2.2.5
Affected Plugin
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)
Affected Version
<= 2.2.4.1
CVSS
4.3Medium
CVE
CVE pending
View all All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) vulnerabilities

At a glance

This record tracks a medium-severity security vulnerability in the All in One SEO WordPress plugin, affecting versions <= 2.2.4.1. It carries a CVSS score of 4.3 (reachable over the network; low attack complexity). The issue is fixed in version 2.2.5; sites on affected versions should update now. Disclosed May 2014, reported by Marc-Alexandre Montpas.

Vulnerability Overview

The All in One SEO plugin for WordPress is vulnerable to Authenticated Privilege Escalation leading to Post Changes in versions up to, and including, 2.2.4.1. This is due to certain actions being available to low-privileged users. This makes it possible for Subscriber-level attackers to add or modify certain parameters used by the plugin. This includes the post’s SEO title, description and keyword meta tags. This could be used to decrease a site's Search Engine Results Page (SERP) ranking.

Technical Analysis

The vector marks this flaw as remotely reachable over the network, with low attack complexity — no special timing or configuration is needed, and no interaction from a victim user.

Remediation

Update to version 2.2.5, or a newer patched version

How does WordSec protect against this?

The fix is the thing that ends this: All in One SEO 2.2.5 closes this, and updating the plugin is the step that ends it.

  • Alerts

External References

https://www.wordfence.com/threat-intel/vulnerabilities/id/dcd7204f-d950-4fb8-beb2-d9f619824fa1

Related records

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C