Helpful <= 4.5.14 - Authorization Bypass to Repeat Voting
2022-08-16 00:00
Suriya PrakashStrategic Overview
Vulnerability Overview
The Helpful plugin for WordPress is vulnerable to repeat voting in versions up to, and including, 4.5.14 due to insufficient voting verification/authorization. This makes it possible for authenticated attackers to vote more than once in polls created with the plugin.
Technical Analysis
REMEDIATION: Update to version 4.5.15, or a newer patched version --- IDENTIFIER: CWE-285 (Improper Authorization) The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C