blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2023-3325

CRITICAL 9.8 CVSS 3.1
Published
June 20, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
security@wordfence.com
Weakness
CWE-345, CWE-331
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated attackers to the plugin to change the '_cmsc_public_key' in the plugin config, providing access to the plugin's remote control functionalities, such as creating an admin access URL, which can be used for privilege escalation. This can only be exploited if the plugin has not been configured yet, however, if combined with another arbitrary plugin installation and activation vulnerability, the impact can be severe.

Affected WordPress components

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • thoefter CMS Commander – Manage Multiple Sites — Up to and including 2.287
  • cmscommander cms_commander — Up to and including 2.287

References

  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/cms-commander-client/tags/2.287/init.php#L88 Product
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/2927811/cms-commander-client Patch
  • www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/ca37d453-9f9a-46b2-a17f-65a16e3e2ed1?source=cve Patch, Third Party Advisory
  • nvd.nist.gov Official NVD record