KB Support <= 1.5.88 - Missing Authorization to Authenticated (Subscriber+) User Data Retrieval
2023-07-12 00:00
AnonymousStrategic Overview
StatusPatched in 1.5.89
Affected Version
< 1.5.89CVSS4.3Medium
CVE
N/AVulnerability Overview
The KB Support plugin for WordPress is vulnerable to user data retrieval in versions up to, and including, 1.5.88. This is due to to a missing capability check on the kbs_ajax_get_customer_data() function. This makes it possible for authenticated attackers with minimal permissions, such as a subscriber, to execute the function and retrieve limited user data like email, name, phone, and url.
Technical Analysis
REMEDIATION: Update to version 1.5.89, or a newer patched version --- IDENTIFIER: CWE-862 (Missing Authorization) The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C