WordPress security changelog
HIGH CVE-2023-4293 Modified

Premium Packages - Sell Digital Products Securely: Privilege escalation or authentication bypass

Premium Packages - Sell Digital Products Securely is affected by privilege escalation or authentication bypass. Exploitation requires an authenticated WordPress account. A successful request can grant permissions or access that the caller should not possess.

CVE / CNA score 8.8 CVSS 3.1 · security@wordfence.com
NVD score 6.5 CVSS 3.1 · nvd@nist.gov
Component
Premium Packages - Sell Digital Products Securely
Plugin slug
wpdm-premium-packages
Affected
See vendor advisory
Safe version
See mitigation notes
Published
Aug 12, 2023
Weakness
CWE-269 — Improper Privilege Management

This CVE was published Aug 12, 2023 and is one of 11 known issues for this plugin.

What to do

Patch or disable the affected component.

Update Premium Packages - Sell Digital Products Securely to a release outside the affected range, or disable and remove it until a fixed version is available.

Source record

Technical description

The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.4 due to insufficient restriction on the 'wpdmpp_update_profile' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'profile[role]' parameter during a profile update.

CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References

Primary and upstream sources