blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2021-25032

CRITICAL 9.8 CVSS 3.1
Published
January 10, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-352, CWE-862
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabilities Pro WordPress plugin before 2.3.1 does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure that the options to be updated belong to the plugin. As a result, unauthenticated attackers could update arbitrary blog options, such as the default role and make any new registered user with an administrator role.

Affected products and versions

  • Unknown PublishPress Capabilities – User Role Access, Editor Permissions, Admin Menus — From 2.0 (including) to 2.0* (excluding)
  • Unknown PublishPress Capabilities – User Role Access, Editor Permissions, Admin Menus — From 2.3.1 (including) to 2.3.1 (excluding)
  • Unknown PublishPress Capabilities Pro — From 2.0 (including) to 2.0* (excluding)
  • Unknown PublishPress Capabilities Pro — From 2.3.1 (including) to 2.3.1 (excluding)
  • publishpress capabilities — Before 2.3.1

References

  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/2640161 Patch, Third Party Advisory
  • wpscan.com https://wpscan.com/vulnerability/2f0f1a32-0c7a-48e6-8617-e0b2dcf62727 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record