WordPress CVEs

Description

The FundEngine plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.0. This is due to the plugin not properly verifying user meta updated through the update_user_meta function. This makes it possible for authenticated attackers, with subscriber-level access and above, to update their user meta which can be leveraged to update their capabilities to gain administrator access.

Affected WordPress components

• FundEngine – Donation and Crowdfunding Platform Plugin · wp-fundraising-donation
  Confirmed match Active
  Up to and including 1.7.0
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• roxnor FundEngine – Donation and Crowdfunding Platform — Up to and including 1.7.0
• wpmet wp_fundraising_donation_and_crowdfunding_platform — Up to and including 1.7.0
• wpmet fundengine — Before 1.7.1

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3128099%40wp-fundraising-donation%2Ftrunk&old=3072093%40wp-fundraising-donation%2Ftrunk&sfp_email=&sfph_mail= Patch
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/2ec6cf42-291b-452d-ad14-80ae1cd5ec5c?source=cve Third Party Advisory
• nvd.nist.gov Official NVD record