SB2019041201 - Improper access control in Yuzo Related Posts WordPress plugin 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019041201

SB2019041201 - Improper access control in Yuzo Related Posts WordPress plugin

Published: April 12, 2019 Updated: May 14, 2019

Security Bulletin ID SB2019041201
Severity
High
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Improper access control (CVE-ID: CVE-2019-11869)

The vulnerability allows a remote attacker to gain unauthorized access to the website.

The vulnerability exists due to improper access restrictions when processing HTTP requests. A remote attacker can pass specially crafted configuration to the affected application and inject arbitrary JavaScript code WordPress configuration.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable application.

Note: the vulnerability is being actively exploited i the wild.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References